medium5.0
CVE-2013-2872
Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote atta…
Impact
Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 28.0.1500.70 Versions 28.0.1500.0, 28.0.1500.2, 28.0.1500.3, 28.0.1500.4, 28.0.1500.5 |
References
- NVD record
- CVE.org record
- http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=5e3678ea33ab00b5977bde219cd9ec6f1768d78a
- http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html
- https://code.google.com/p/chromium/issues/detail?id=242702
- http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=5e3678ea33ab00b5977bde219cd9ec6f1768d78a
- http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html
- https://code.google.com/p/chromium/issues/detail?id=242702