Lucene search

[email protected]CVE-2013-2917

HistoryOct 02, 2013 - 10:35 a.m.

CVE-2013-2917

2013-10-0210:35:35

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-2917

reverbconvolverstage

blink

google chrome

denial of service

nvd

web audio

out-of-bounds read

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

Confidence

Low

EPSS

0.013

Percentile

85.9%

JSON

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.

Affected configurations

NVD

Node

googlechromeRange≤30.0.1599.65

googlechromeMatch30.0.1599.0

googlechromeMatch30.0.1599.1

googlechromeMatch30.0.1599.2

googlechromeMatch30.0.1599.4

googlechromeMatch30.0.1599.5

googlechromeMatch30.0.1599.6

googlechromeMatch30.0.1599.7

googlechromeMatch30.0.1599.8

googlechromeMatch30.0.1599.9

googlechromeMatch30.0.1599.10

googlechromeMatch30.0.1599.11

googlechromeMatch30.0.1599.12

googlechromeMatch30.0.1599.13

googlechromeMatch30.0.1599.14

googlechromeMatch30.0.1599.15

googlechromeMatch30.0.1599.16

googlechromeMatch30.0.1599.17

googlechromeMatch30.0.1599.18

googlechromeMatch30.0.1599.19

googlechromeMatch30.0.1599.20

googlechromeMatch30.0.1599.21

googlechromeMatch30.0.1599.22

googlechromeMatch30.0.1599.23

googlechromeMatch30.0.1599.24

googlechromeMatch30.0.1599.25

googlechromeMatch30.0.1599.26

googlechromeMatch30.0.1599.27

googlechromeMatch30.0.1599.28

googlechromeMatch30.0.1599.29

googlechromeMatch30.0.1599.30

googlechromeMatch30.0.1599.31

googlechromeMatch30.0.1599.32

googlechromeMatch30.0.1599.33

googlechromeMatch30.0.1599.34

googlechromeMatch30.0.1599.35

googlechromeMatch30.0.1599.36

googlechromeMatch30.0.1599.37

googlechromeMatch30.0.1599.38

googlechromeMatch30.0.1599.39

googlechromeMatch30.0.1599.40

googlechromeMatch30.0.1599.41

googlechromeMatch30.0.1599.42

googlechromeMatch30.0.1599.43

googlechromeMatch30.0.1599.44

googlechromeMatch30.0.1599.47

googlechromeMatch30.0.1599.48

googlechromeMatch30.0.1599.49

googlechromeMatch30.0.1599.50

googlechromeMatch30.0.1599.51

googlechromeMatch30.0.1599.52

googlechromeMatch30.0.1599.53

googlechromeMatch30.0.1599.56

googlechromeMatch30.0.1599.57

googlechromeMatch30.0.1599.58

googlechromeMatch30.0.1599.59

googlechromeMatch30.0.1599.60

googlechromeMatch30.0.1599.61

googlechromeMatch30.0.1599.64

VendorProductVersionCPE
googlechrome30.0.1599.23cpe:/a:google:chrome:30.0.1599.23:::
googlechrome30.0.1599.2cpe:/a:google:chrome:30.0.1599.2:::
googlechrome30.0.1599.12cpe:/a:google:chrome:30.0.1599.12:::
googlechrome30.0.1599.36cpe:/a:google:chrome:30.0.1599.36:::
googlechrome30.0.1599.11cpe:/a:google:chrome:30.0.1599.11:::
googlechrome30.0.1599.13cpe:/a:google:chrome:30.0.1599.13:::
googlechrome30.0.1599.53cpe:/a:google:chrome:30.0.1599.53:::
googlechrome30.0.1599.56cpe:/a:google:chrome:30.0.1599.56:::
googlechrome30.0.1599.4cpe:/a:google:chrome:30.0.1599.4:::
googlechrome30.0.1599.32cpe:/a:google:chrome:30.0.1599.32:::

Vendor	Product	Version	CPE
google	chrome	30.0.1599.23	cpe:/a:google:chrome:30.0.1599.23:::
google	chrome	30.0.1599.2	cpe:/a:google:chrome:30.0.1599.2:::
google	chrome	30.0.1599.12	cpe:/a:google:chrome:30.0.1599.12:::
google	chrome	30.0.1599.36	cpe:/a:google:chrome:30.0.1599.36:::
google	chrome	30.0.1599.11	cpe:/a:google:chrome:30.0.1599.11:::
google	chrome	30.0.1599.13	cpe:/a:google:chrome:30.0.1599.13:::
google	chrome	30.0.1599.53	cpe:/a:google:chrome:30.0.1599.53:::
google	chrome	30.0.1599.56	cpe:/a:google:chrome:30.0.1599.56:::
google	chrome	30.0.1599.4	cpe:/a:google:chrome:30.0.1599.4:::
google	chrome	30.0.1599.32	cpe:/a:google:chrome:30.0.1599.32:::