CVE-2013-2858
high
CVSS v3
—
VIR risk
7.5
Description
Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | 7.0 | affected | |
| debian | 8.0 | affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| chrome | {"endIncluding":"27.0.1453.109"} | | |
| chrome | 27.0.1453.0 | | |
| chrome | 27.0.1453.1 | | |
| chrome | 27.0.1453.2 | | |
| chrome | 27.0.1453.3 | | |
| chrome | 27.0.1453.4 | | |
| chrome | 27.0.1453.5 | | |
| chrome | 27.0.1453.6 | | |
| chrome | 27.0.1453.7 | | |
| chrome | 27.0.1453.8 | | |
| chrome | 27.0.1453.9 | | |
| chrome | 27.0.1453.10 | | |
| chrome | 27.0.1453.11 | | |
| chrome | 27.0.1453.12 | | |
| chrome | 27.0.1453.13 | | |
| chrome | 27.0.1453.15 | | |
| chrome | 27.0.1453.34 | | |
| chrome | 27.0.1453.35 | | |
| chrome | 27.0.1453.36 | | |
| chrome | 27.0.1453.37 | | |
| chrome | 27.0.1453.38 | | |
| chrome | 27.0.1453.39 | | |
| chrome | 27.0.1453.40 | | |
| chrome | 27.0.1453.41 | | |
| chrome | 27.0.1453.42 | | |
| chrome | 27.0.1453.43 | | |
| chrome | 27.0.1453.44 | | |
| chrome | 27.0.1453.45 | | |
| chrome | 27.0.1453.46 | | |
| chrome | 27.0.1453.47 | | |
| chrome | 27.0.1453.49 | | |
| chrome | 27.0.1453.50 | | |
| chrome | 27.0.1453.51 | | |
| chrome | 27.0.1453.52 | | |
| chrome | 27.0.1453.54 | | |
| chrome | 27.0.1453.55 | | |
| chrome | 27.0.1453.56 | | |
| chrome | 27.0.1453.57 | | |
| chrome | 27.0.1453.58 | | |
| chrome | 27.0.1453.59 | | |
| chrome | 27.0.1453.60 | | |
| chrome | 27.0.1453.61 | | |
| chrome | 27.0.1453.62 | | |
| chrome | 27.0.1453.63 | | |
| chrome | 27.0.1453.64 | | |
| chrome | 27.0.1453.65 | | |
| chrome | 27.0.1453.66 | | |
| chrome | 27.0.1453.67 | | |
| chrome | 27.0.1453.68 | | |
| chrome | 27.0.1453.69 | | |
| chrome | 27.0.1453.70 | | |
| chrome | 27.0.1453.71 | | |
| chrome | 27.0.1453.72 | | |
| chrome | 27.0.1453.73 | | |
| chrome | 27.0.1453.74 | | |
| chrome | 27.0.1453.75 | | |
| chrome | 27.0.1453.76 | | |
| chrome | 27.0.1453.77 | | |
| chrome | 27.0.1453.78 | | |
| chrome | 27.0.1453.79 | | |
| chrome | 27.0.1453.80 | | |
| chrome | 27.0.1453.81 | | |
| chrome | 27.0.1453.82 | | |
| chrome | 27.0.1453.83 | | |
| chrome | 27.0.1453.84 | | |
| chrome | 27.0.1453.85 | | |
| chrome | 27.0.1453.86 | | |
| chrome | 27.0.1453.87 | | |
| chrome | 27.0.1453.88 | | |
| chrome | 27.0.1453.89 | | |
| chrome | 27.0.1453.90 | | |
| chrome | 27.0.1453.91 | | |
| chrome | 27.0.1453.93 | | |
| chrome | 27.0.1453.94 | | |
| chrome | 27.0.1453.102 | | |
| chrome | 27.0.1453.103 | | |
| chrome | 27.0.1453.104 | | |
| chrome | 27.0.1453.105 | | |
| chrome | 27.0.1453.106 | | |
| chrome | 27.0.1453.107 | | |
| chrome | 27.0.1453.108 | |
References
- http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html
- http://www.debian.org/security/2013/dsa-2706
- https://code.google.com/p/chromium/issues/detail?id=239897
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15909
- http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html
- http://www.debian.org/security/2013/dsa-2706
- https://code.google.com/p/chromium/issues/detail?id=239897
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15909
CWEs
CWE-416
💬 Discuss CVE-2013-2858 on VIR Community →
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.