Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-2866

The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine's physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.

Published

2013-06-19T20:55:01.303

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome ≤ 27.0.1453.115 Yes
Application google chrome 27.0.1453.0 Yes
Application google chrome 27.0.1453.1 Yes
Application google chrome 27.0.1453.2 Yes
Application google chrome 27.0.1453.3 Yes
Application google chrome 27.0.1453.4 Yes
Application google chrome 27.0.1453.5 Yes
Application google chrome 27.0.1453.6 Yes
Application google chrome 27.0.1453.7 Yes
Application google chrome 27.0.1453.8 Yes
Application google chrome 27.0.1453.9 Yes
Application google chrome 27.0.1453.10 Yes
Application google chrome 27.0.1453.11 Yes
Application google chrome 27.0.1453.12 Yes
Application google chrome 27.0.1453.13 Yes
Application google chrome 27.0.1453.15 Yes
Application google chrome 27.0.1453.34 Yes
Application google chrome 27.0.1453.35 Yes
Application google chrome 27.0.1453.36 Yes
Application google chrome 27.0.1453.37 Yes
Application google chrome 27.0.1453.38 Yes
Application google chrome 27.0.1453.39 Yes
Application google chrome 27.0.1453.40 Yes
Application google chrome 27.0.1453.41 Yes
Application google chrome 27.0.1453.42 Yes
Application google chrome 27.0.1453.43 Yes
Application google chrome 27.0.1453.44 Yes
Application google chrome 27.0.1453.45 Yes
Application google chrome 27.0.1453.46 Yes
Application google chrome 27.0.1453.47 Yes
Application google chrome 27.0.1453.49 Yes
Application google chrome 27.0.1453.50 Yes
Application google chrome 27.0.1453.51 Yes
Application google chrome 27.0.1453.52 Yes
Application google chrome 27.0.1453.54 Yes
Application google chrome 27.0.1453.55 Yes
Application google chrome 27.0.1453.56 Yes
Application google chrome 27.0.1453.57 Yes
Application google chrome 27.0.1453.58 Yes
Application google chrome 27.0.1453.59 Yes
Application google chrome 27.0.1453.60 Yes
Application google chrome 27.0.1453.61 Yes
Application google chrome 27.0.1453.62 Yes
Application google chrome 27.0.1453.63 Yes
Application google chrome 27.0.1453.64 Yes
Application google chrome 27.0.1453.65 Yes
Application google chrome 27.0.1453.66 Yes
Application google chrome 27.0.1453.67 Yes
Application google chrome 27.0.1453.68 Yes
Application google chrome 27.0.1453.69 Yes
Application google chrome 27.0.1453.70 Yes
Application google chrome 27.0.1453.71 Yes
Application google chrome 27.0.1453.72 Yes
Application google chrome 27.0.1453.73 Yes
Application google chrome 27.0.1453.74 Yes
Application google chrome 27.0.1453.75 Yes
Application google chrome 27.0.1453.76 Yes
Application google chrome 27.0.1453.77 Yes
Application google chrome 27.0.1453.78 Yes
Application google chrome 27.0.1453.79 Yes
Application google chrome 27.0.1453.80 Yes
Application google chrome 27.0.1453.81 Yes
Application google chrome 27.0.1453.82 Yes
Application google chrome 27.0.1453.83 Yes
Application google chrome 27.0.1453.84 Yes
Application google chrome 27.0.1453.85 Yes
Application google chrome 27.0.1453.86 Yes
Application google chrome 27.0.1453.87 Yes
Application google chrome 27.0.1453.88 Yes
Application google chrome 27.0.1453.89 Yes
Application google chrome 27.0.1453.90 Yes
Application google chrome 27.0.1453.91 Yes
Application google chrome 27.0.1453.93 Yes
Application google chrome 27.0.1453.94 Yes
Application google chrome 27.0.1453.102 Yes
Application google chrome 27.0.1453.103 Yes
Application google chrome 27.0.1453.104 Yes
Application google chrome 27.0.1453.105 Yes
Application google chrome 27.0.1453.106 Yes
Application google chrome 27.0.1453.107 Yes
Application google chrome 27.0.1453.108 Yes
Application google chrome 27.0.1453.109 Yes
Application google chrome 27.0.1453.110 Yes
Application google chrome 27.0.1453.111 Yes
Application google chrome 27.0.1453.112 Yes
Application google chrome 27.0.1453.113 Yes
Application google chrome 27.0.1453.114 Yes
Operating System google chrome_os 27.0.1453.115 Yes
References