CVE-2013-6660 in Google Chrome
Resumen (Inglés)
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.
Reservar
2013-11-05
Divulgación
2014-02-23
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 12384 | Google Chrome Drag / Drop Feature escalada de privilegios | 264 | No probado | Arreglo oficial | CVE-2013-6660 |