CVE-2013-6666: Undefined Security Weakness

The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepperflashrendererhost.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing CORS simple headers before proceeding with a PPBFlash.Navigate operation, which might allow remot...

PT-2014-3164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.146 Description The issue is related to the PepperFlashRendererHost::OnNavigate function, which does not properly verify that all headers are Cross-Origin Resource Sharing CORS simple headers before...