CVE-2013-2834: Medium severity chrome os vulnerability
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2834?
CVE-2013-2834 has a moderate severity level due to its potential to allow remote exploitation through malicious web content.
How do I fix CVE-2013-2834?
To fix CVE-2013-2834, update your Google Chrome OS to version 26.0.1410.57 or later.
What versions of Chrome OS are affected by CVE-2013-2834?
CVE-2013-2834 affects Chrome OS versions prior to 26.0.1410.57.
What types of attacks can exploit CVE-2013-2834?
CVE-2013-2834 can be exploited through crafted websites designed to bypass domain-whitelist protections.
Is there a workaround for CVE-2013-2834?
There is no recommended workaround for CVE-2013-2834; the best solution is to upgrade to a patched version of Chrome OS.