CVE-2013-6660 in Chrome
Résumé (Anglaise)
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
05/11/2013
Divulgation
23/02/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 12384 | Google Chrome Drag / Drop Feature élévation de privilèges | 264 | Non prouvée | Correctif officiel | CVE-2013-6660 |