CVE-2013-2866: Medium severity Google Chrome vulnerability
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine's physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2866?
CVE-2013-2866 is considered a critical vulnerability as it can potentially allow remote attackers to access sensitive information through unauthorized camera or microphone access.
How do I fix CVE-2013-2866?
To fix CVE-2013-2866, update Google Chrome to version 27.0.1453.116 or later.
Which versions of Google Chrome are affected by CVE-2013-2866?
CVE-2013-2866 affects Google Chrome versions before 27.0.1453.116.
Can CVE-2013-2866 affect Chrome OS?
Yes, CVE-2013-2866 can also affect Google Chrome OS versions prior to 27.0.1453.116.
Is there a workaround for CVE-2013-2866?
Currently, the best approach for CVE-2013-2866 is to apply the available updates to Google Chrome.