CVE-2013-6660
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers t…
Published: 2014-02-24 · CVSS: Unscored
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7