cbcvebase.
CVE-2013-6660
published 2014-02-24

CVE-2013-6660: The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows…

PriorityP420medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
0.95%
57.9th percentile
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.

Affected

97 ranges· showing 25
VendorProductVersion rangeFixed in
googlechrome<= 33.0.1750.116—
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.