The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | 33.0.1750.1 | 33.0.1750.1 | |
Chrome | 33.0.1750.89 | 33.0.1750.89 | |
Chrome | 33.0.1750.51 | 33.0.1750.51 | |
Chrome | 33.0.1750.117 | 33.0.1750.117 | |
Chrome | 33.0.1750.44 | 33.0.1750.44 | |
Chrome | 33.0.1750.39 | 33.0.1750.39 | |
Chrome | 33.0.1750.73 | 33.0.1750.73 | |
Chrome | 33.0.1750.133 | 33.0.1750.133 | |
Chrome | 33.0.1750.70 | 33.0.1750.70 | |
Chrome | 33.0.1750.22 | 33.0.1750.22 | |
Chrome | 33.0.1750.41 | 33.0.1750.41 | |
Chrome | 33.0.1750.66 | 33.0.1750.66 | |
Chrome | 33.0.1750.12 | 33.0.1750.12 | |
Chrome | 33.0.1750.125 | 33.0.1750.125 | |
Chrome | 33.0.1750.92 | 33.0.1750.92 | |
Chrome | 33.0.1750.16 | 33.0.1750.16 | |
Chrome | 33.0.1750.65 | 33.0.1750.65 | |
Chrome | 33.0.1750.46 | 33.0.1750.46 | |
Chrome | 33.0.1750.85 | 33.0.1750.85 | |
Chrome | 33.0.1750.79 | 33.0.1750.79 | |
Chrome | 33.0.1750.126 | 33.0.1750.126 | |
Chrome | 33.0.1750.106 | 33.0.1750.106 | |
Chrome | 33.0.1750.52 | 33.0.1750.52 | |
Chrome | 33.0.1750.38 | 33.0.1750.38 | |
Chrome | 33.0.1750.88 | 33.0.1750.88 | |
Chrome | 33.0.1750.93 | 33.0.1750.93 | |
Chrome | 33.0.1750.110 | 33.0.1750.110 | |
Chrome | 33.0.1750.11 | 33.0.1750.11 | |
Chrome | 33.0.1750.104 | 33.0.1750.104 | |
Chrome | 33.0.1750.61 | 33.0.1750.61 | |
Chrome | 33.0.1750.0 | 33.0.1750.0 | |
Chrome | 33.0.1750.34 | 33.0.1750.34 | |
Chrome | 33.0.1750.31 | 33.0.1750.31 | |
Chrome | 33.0.1750.36 | 33.0.1750.36 | |
Chrome | 33.0.1750.23 | 33.0.1750.23 | |
Chrome | 33.0.1750.112 | 33.0.1750.112 | |
Chrome | 33.0.1750.47 | 33.0.1750.47 | |
Chrome | 33.0.1750.9 | 33.0.1750.9 | |
Chrome | 33.0.1750.28 | 33.0.1750.28 | |
Chrome | 33.0.1750.69 | 33.0.1750.69 | |
Chrome | 33.0.1750.55 | 33.0.1750.55 | |
Chrome | 33.0.1750.109 | 33.0.1750.109 | |
Chrome | 33.0.1750.10 | 33.0.1750.10 | |
Chrome | 33.0.1750.81 | 33.0.1750.81 | |
Chrome | 33.0.1750.49 | 33.0.1750.49 | |
Chrome | 33.0.1750.57 | 33.0.1750.57 | |
Chrome | 33.0.1750.71 | 33.0.1750.71 | |
Chrome | 33.0.1750.45 | 33.0.1750.45 | |
Chrome | 33.0.1750.115 | 33.0.1750.115 | |
Chrome | 33.0.1750.108 | 33.0.1750.108 | |
Chrome | 33.0.1750.5 | 33.0.1750.5 | |
Chrome | 33.0.1750.40 | 33.0.1750.40 | |
Chrome | 33.0.1750.29 | 33.0.1750.29 | |
Chrome | 33.0.1750.132 | 33.0.1750.132 | |
Chrome | 33.0.1750.76 | 33.0.1750.76 | |
Chrome | 33.0.1750.13 | 33.0.1750.13 | |
Chrome | 33.0.1750.58 | 33.0.1750.58 | |
Chrome | 33.0.1750.75 | 33.0.1750.75 | |
Chrome | 33.0.1750.63 | 33.0.1750.63 | |
Chrome | 33.0.1750.136 | 33.0.1750.136 | |
Chrome | 33.0.1750.6 | 33.0.1750.6 | |
Chrome | 33.0.1750.20 | 33.0.1750.20 | |
Chrome | 33.0.1750.59 | 33.0.1750.59 | |
Chrome | 33.0.1750.3 | 33.0.1750.3 | |
Chrome | 33.0.1750.25 | 33.0.1750.25 | |
Chrome | 33.0.1750.82 | 33.0.1750.82 | |
Chrome | 33.0.1750.64 | 33.0.1750.64 | |
Chrome | 33.0.1750.113 | 33.0.1750.113 | |
Chrome | 33.0.1750.50 | 33.0.1750.50 | |
Chrome | 33.0.1750.60 | 33.0.1750.60 | |
Chrome | 33.0.1750.26 | 33.0.1750.26 | |
Chrome | 33.0.1750.19 | 33.0.1750.19 | |
Chrome | 33.0.1750.18 | 33.0.1750.18 | |
Chrome | 33.0.1750.8 | 33.0.1750.8 | |
Chrome | 33.0.1750.42 | 33.0.1750.42 | |
Chrome | 33.0.1750.7 | 33.0.1750.7 | |
Chrome | 33.0.1750.21 | 33.0.1750.21 | |
Chrome | 33.0.1750.80 | 33.0.1750.80 | |
Chrome | 33.0.1750.68 | 33.0.1750.68 | |
Chrome | 33.0.1750.90 | 33.0.1750.90 | |
Chrome | 33.0.1750.77 | 33.0.1750.77 | |
Chrome | 33.0.1750.111 | 33.0.1750.111 | |
Chrome | 33.0.1750.35 | 33.0.1750.35 | |
Chrome | 33.0.1750.116 | 33.0.1750.116 | |
Chrome | 33.0.1750.43 | 33.0.1750.43 | |
Chrome | 33.0.1750.27 | 33.0.1750.27 | |
Chrome | 33.0.1750.4 | 33.0.1750.4 | |
Chrome | 33.0.1750.48 | 33.0.1750.48 | |
Chrome | 33.0.1750.135 | 33.0.1750.135 | |
Chrome | 33.0.1750.15 | 33.0.1750.15 | |
Chrome | 33.0.1750.56 | 33.0.1750.56 | |
Chrome | 33.0.1750.24 | 33.0.1750.24 | |
Chrome | 33.0.1750.30 | 33.0.1750.30 | |
Chrome | 33.0.1750.67 | 33.0.1750.67 | |
Chrome | * | 33.0.1750.144 | |
Chrome | 33.0.1750.107 | 33.0.1750.107 | |
Chrome | 33.0.1750.2 | 33.0.1750.2 | |
Chrome | 33.0.1750.14 | 33.0.1750.14 | |
Chrome | 33.0.1750.124 | 33.0.1750.124 | |
Chrome | 33.0.1750.74 | 33.0.1750.74 | |
Chrome | 33.0.1750.62 | 33.0.1750.62 | |
Chrome | 33.0.1750.91 | 33.0.1750.91 | |
Chrome | 33.0.1750.83 | 33.0.1750.83 | |
Chrome | 33.0.1750.53 | 33.0.1750.53 | |
Chrome | 33.0.1750.37 | 33.0.1750.37 | |
Chrome | 33.0.1750.54 | 33.0.1750.54 |