CVE-2013-2834

CVE-2013-2834 and CVE-2013-2835 affect Google Chrome OS up to version 26.0.1410.57. The issue is an origin restrictions bypass in the O3D and Google Talk plug-ins, allowing remote attackers to bypass the domain-whitelist protection via a crafted site. Affected product: Chrome OS (before 26.0.1410...