high7.5Public exploit code
CVE-2013-2842
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)2013-04-04 · dos · osx
Impact
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 6.1.4 Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1 |
| Chrome | through 27.0.1453.91 Versions 27.0.1453.0, 27.0.1453.1, 27.0.1453.2, 27.0.1453.3, 27.0.1453.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.debian.org/security/2013/dsa-2695
- https://code.google.com/p/chromium/issues/detail?id=226696
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15914
- http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.debian.org/security/2013/dsa-2695
- https://code.google.com/p/chromium/issues/detail?id=226696
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15914