CVE-2013-2632

2013-03-2121:55:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.006

Percentile

78.2%

JSON

Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.

Affected configurations

Nvd

Node

googlechromeRange≤27.0.1444.0

googlev8Range≤3.17.12

googlev8Match3.17.0

googlev8Match3.17.1

googlev8Match3.17.2

googlev8Match3.17.3

googlev8Match3.17.4

googlev8Match3.17.5

googlev8Match3.17.6

googlev8Match3.17.7

googlev8Match3.17.8

googlev8Match3.17.9

googlev8Match3.17.10

googlev8Match3.17.11

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googlev8*cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*
googlev83.17.0cpe:2.3:a:google:v8:3.17.0:*:*:*:*:*:*:*
googlev83.17.1cpe:2.3:a:google:v8:3.17.1:*:*:*:*:*:*:*
googlev83.17.2cpe:2.3:a:google:v8:3.17.2:*:*:*:*:*:*:*
googlev83.17.3cpe:2.3:a:google:v8:3.17.3:*:*:*:*:*:*:*
googlev83.17.4cpe:2.3:a:google:v8:3.17.4:*:*:*:*:*:*:*
googlev83.17.5cpe:2.3:a:google:v8:3.17.5:*:*:*:*:*:*:*
googlev83.17.6cpe:2.3:a:google:v8:3.17.6:*:*:*:*:*:*:*
googlev83.17.7cpe:2.3:a:google:v8:3.17.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
google	v8	*	cpe:2.3:a:google:v8::::::::
google	v8	3.17.0	cpe:2.3:a:google:v8:3.17.0:::::::*
google	v8	3.17.1	cpe:2.3:a:google:v8:3.17.1:::::::*
google	v8	3.17.2	cpe:2.3:a:google:v8:3.17.2:::::::*
google	v8	3.17.3	cpe:2.3:a:google:v8:3.17.3:::::::*
google	v8	3.17.4	cpe:2.3:a:google:v8:3.17.4:::::::*
google	v8	3.17.5	cpe:2.3:a:google:v8:3.17.5:::::::*
google	v8	3.17.6	cpe:2.3:a:google:v8:3.17.6:::::::*
google	v8	3.17.7	cpe:2.3:a:google:v8:3.17.7:::::::*