CVE-2013-6666

The CVE-2013-6666 entry affects Google Chrome prior to 33.0.1750.146, where PepperFlashRendererHost::OnNavigate did not verify that all headers were Cross-Origin Resource Sharing (CORS) simple headers before performing a PPB_Flash.Navigate. This could allow a remote attacker to bypass CORS restri...