CVE-2013-2835 Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechani...
MediumCVSS 5.0
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | <= 26.0.1410.56 | No fix listed |
| Google chrome os | = 26.0.1410.0 | No fix listed |
| Google chrome os | = 26.0.1410.1 | No fix listed |
| Google chrome os | = 26.0.1410.3 | No fix listed |
| Google chrome os | = 26.0.1410.4 | No fix listed |
| Google chrome os | = 26.0.1410.5 | No fix listed |
| Google chrome os | = 26.0.1410.6 | No fix listed |
| Google chrome os | = 26.0.1410.7 | No fix listed |
| Google chrome os | = 26.0.1410.8 | No fix listed |
| Google chrome os | = 26.0.1410.9 | No fix listed |
| Google chrome os | = 26.0.1410.10 | No fix listed |
| Google chrome os | = 26.0.1410.11 | No fix listed |
| Google chrome os | = 26.0.1410.12 | No fix listed |
| Google chrome os | = 26.0.1410.14 | No fix listed |
| Google chrome os | = 26.0.1410.15 | No fix listed |
| Google chrome os | = 26.0.1410.16 | No fix listed |
| Google chrome os | = 26.0.1410.17 | No fix listed |
| Google chrome os | = 26.0.1410.18 | No fix listed |
| Google chrome os | = 26.0.1410.19 | No fix listed |
| Google chrome os | = 26.0.1410.20 | No fix listed |
| Google chrome os | = 26.0.1410.21 | No fix listed |
| Google chrome os | = 26.0.1410.22 | No fix listed |
| Google chrome os | = 26.0.1410.23 | No fix listed |
| Google chrome os | = 26.0.1410.24 | No fix listed |
| Google chrome os | = 26.0.1410.25 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | = 26.0.1410.26 | No fix listed |
| Google chrome os | = 26.0.1410.27 | No fix listed |
| Google chrome os | = 26.0.1410.28 | No fix listed |
| Google chrome os | = 26.0.1410.29 | No fix listed |
| Google chrome os | = 26.0.1410.30 | No fix listed |
| Google chrome os | = 26.0.1410.31 | No fix listed |
| Google chrome os | = 26.0.1410.32 | No fix listed |
| Google chrome os | = 26.0.1410.33 | No fix listed |
| Google chrome os | = 26.0.1410.34 | No fix listed |
| Google chrome os | = 26.0.1410.35 | No fix listed |
| Google chrome os | = 26.0.1410.36 | No fix listed |
| Google chrome os | = 26.0.1410.37 | No fix listed |
| Google chrome os | = 26.0.1410.38 | No fix listed |
| Google chrome os | = 26.0.1410.39 | No fix listed |
| Google chrome os | = 26.0.1410.40 | No fix listed |
| Google chrome os | = 26.0.1410.41 | No fix listed |
| Google chrome os | = 26.0.1410.42 | No fix listed |
| Google chrome os | = 26.0.1410.43 | No fix listed |
| Google chrome os | = 26.0.1410.44 | No fix listed |
| Google chrome os | = 26.0.1410.45 | No fix listed |
| Google chrome os | = 26.0.1410.46 | No fix listed |
| Google chrome os | = 26.0.1410.47 | No fix listed |
| Google chrome os | = 26.0.1410.48 | No fix listed |
| Google chrome os | = 26.0.1410.49 | No fix listed |
| Google chrome os | = 26.0.1410.50 | No fix listed |
| Google chrome os | = 26.0.1410.51 | No fix listed |
| Google chrome os | = 26.0.1410.52 | No fix listed |
| Google chrome os | = 26.0.1410.54 | No fix listed |
| Google chrome os | = 26.0.1410.55 | No fix listed |