CVE-2013-2842
high
CVSS v3
—
VIR risk
7.5
Description
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| macos | affected | | |
| macos | 1.0.0 | affected | |
| macos | 1.0.1 | affected | |
| macos | 1.0.2 | affected | |
| macos | 1.1.0 | affected | |
| macos | 1.1.1 | affected | |
| macos | 1.1.2 | affected | |
| macos | 1.1.3 | affected | |
| macos | 1.1.4 | affected | |
| macos | 1.1.5 | affected | |
| macos | 2.0 | affected | |
| macos | 2.0.0 | affected | |
| macos | 2.0.1 | affected | |
| macos | 2.0.2 | affected | |
| macos | 2.1 | affected | |
| macos | 2.1.1 | affected | |
| macos | 2.2 | affected | |
| macos | 2.2.1 | affected | |
| macos | 3.0 | affected | |
| macos | 3.0.1 | affected | |
| macos | 3.1 | affected | |
| macos | 3.1.2 | affected | |
| macos | 3.1.3 | affected | |
| macos | 3.2 | affected | |
| macos | 3.2.1 | affected | |
| macos | 3.2.2 | affected | |
| macos | 4.0 | affected | |
| macos | 4.0.1 | affected | |
| macos | 4.0.2 | affected | |
| macos | 4.1 | affected | |
| macos | 4.2.1 | affected | |
| macos | 4.2.5 | affected | |
| macos | 4.2.8 | affected | |
| macos | 4.3.0 | affected | |
| macos | 4.3.1 | affected | |
| macos | 4.3.2 | affected | |
| macos | 4.3.3 | affected | |
| macos | 4.3.5 | affected | |
| macos | 5.0 | affected | |
| macos | 5.0.1 | affected | |
| macos | 5.1 | affected | |
| macos | 5.1.1 | affected | |
| macos | 6.0 | affected | |
| macos | 6.0.1 | affected | |
| macos | 6.0.2 | affected | |
| macos | 6.1 | affected | |
| macos | 6.1.2 | affected | |
| macos | 6.1.3 | affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| chrome | {"endIncluding":"27.0.1453.91"} | | |
| chrome | 27.0.1453.0 | | |
| chrome | 27.0.1453.1 | | |
| chrome | 27.0.1453.2 | | |
| chrome | 27.0.1453.3 | | |
| chrome | 27.0.1453.4 | | |
| chrome | 27.0.1453.5 | | |
| chrome | 27.0.1453.6 | | |
| chrome | 27.0.1453.7 | | |
| chrome | 27.0.1453.8 | | |
| chrome | 27.0.1453.9 | | |
| chrome | 27.0.1453.10 | | |
| chrome | 27.0.1453.11 | | |
| chrome | 27.0.1453.12 | | |
| chrome | 27.0.1453.13 | | |
| chrome | 27.0.1453.15 | | |
| chrome | 27.0.1453.34 | | |
| chrome | 27.0.1453.35 | | |
| chrome | 27.0.1453.36 | | |
| chrome | 27.0.1453.37 | | |
| chrome | 27.0.1453.38 | | |
| chrome | 27.0.1453.39 | | |
| chrome | 27.0.1453.40 | | |
| chrome | 27.0.1453.41 | | |
| chrome | 27.0.1453.42 | | |
| chrome | 27.0.1453.43 | | |
| chrome | 27.0.1453.44 | | |
| chrome | 27.0.1453.45 | | |
| chrome | 27.0.1453.46 | | |
| chrome | 27.0.1453.47 | | |
| chrome | 27.0.1453.49 | | |
| chrome | 27.0.1453.50 | | |
| chrome | 27.0.1453.51 | | |
| chrome | 27.0.1453.52 | | |
| chrome | 27.0.1453.54 | | |
| chrome | 27.0.1453.55 | | |
| chrome | 27.0.1453.56 | | |
| chrome | 27.0.1453.57 | | |
| chrome | 27.0.1453.58 | | |
| chrome | 27.0.1453.59 | | |
| chrome | 27.0.1453.60 | | |
| chrome | 27.0.1453.61 | | |
| chrome | 27.0.1453.62 | | |
| chrome | 27.0.1453.63 | | |
| chrome | 27.0.1453.64 | | |
| chrome | 27.0.1453.65 | | |
| chrome | 27.0.1453.66 | | |
| chrome | 27.0.1453.67 | | |
| chrome | 27.0.1453.68 | | |
| chrome | 27.0.1453.69 | | |
| chrome | 27.0.1453.70 | | |
| chrome | 27.0.1453.71 | | |
| chrome | 27.0.1453.72 | | |
| chrome | 27.0.1453.73 | | |
| chrome | 27.0.1453.74 | | |
| chrome | 27.0.1453.75 | | |
| chrome | 27.0.1453.76 | | |
| chrome | 27.0.1453.77 | | |
| chrome | 27.0.1453.78 | | |
| chrome | 27.0.1453.79 | | |
| chrome | 27.0.1453.80 | | |
| chrome | 27.0.1453.81 | | |
| chrome | 27.0.1453.82 | | |
| chrome | 27.0.1453.83 | | |
| chrome | 27.0.1453.84 | | |
| chrome | 27.0.1453.85 | | |
| chrome | 27.0.1453.86 | | |
| chrome | 27.0.1453.87 | | |
| chrome | 27.0.1453.88 | | |
| chrome | 27.0.1453.89 | | |
| chrome | 27.0.1453.90 | |
References
- http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.debian.org/security/2013/dsa-2695
- https://code.google.com/p/chromium/issues/detail?id=226696
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15914
- http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.debian.org/security/2013/dsa-2695
- https://code.google.com/p/chromium/issues/detail?id=226696
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15914
CWEs
CWE-399
💬 Discuss CVE-2013-2842 on VIR Community →
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.