Design/Logic Flaw

2013-06-1920:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine’s physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.

CPENameOperatorVersion
chromele27.0.1453.115
chromeeq27.0.1453.0
chromeeq27.0.1453.1
chromeeq27.0.1453.2
chromeeq27.0.1453.3
chromeeq27.0.1453.4
chromeeq27.0.1453.5
chromeeq27.0.1453.6
chromeeq27.0.1453.7
chromeeq27.0.1453.8

Name	Operator	Version
chrome	le	27.0.1453.115
chrome	eq	27.0.1453.0
chrome	eq	27.0.1453.1
chrome	eq	27.0.1453.2
chrome	eq	27.0.1453.3
chrome	eq	27.0.1453.4
chrome	eq	27.0.1453.5
chrome	eq	27.0.1453.6
chrome	eq	27.0.1453.7
chrome	eq	27.0.1453.8