CVE-2013-2834 in Google Chrome OS

Summary

Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.

Reservation

04/11/2013

Disclosure

04/16/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
8442	Google Chrome OS O3D Plug-in whitelist.cc access control	264	Not defined	Official fix	CVE-2013-2834
8441	Google Chrome OS Google Talk Plugin access control	264	Not defined	Official fix	CVE-2013-2834