high7.5
CVE-2013-0910
Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the load…
Impact
Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 25.0.1364.126 Versions 25.0.1364.0, 25.0.1364.1, 25.0.1364.2, 25.0.1364.3, 25.0.1364.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html
- https://code.google.com/p/chromium/issues/detail?id=172573
- https://codereview.chromium.org/12086077
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16574
- https://src.chromium.org/viewvc/chrome?view=rev&revision=180103
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html
- https://code.google.com/p/chromium/issues/detail?id=172573
- https://codereview.chromium.org/12086077
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16574
- https://src.chromium.org/viewvc/chrome?view=rev&revision=180103