Ubuntu.comUB:CVE-2013-2870CVE-2013-2870
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
81.0%
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows
remote servers to execute arbitrary code via crafted response traffic after
a URL request.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | chromium-browser | < 28.0.1500.71-0ubuntu1.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | chromium-browser | < 28.0.1500.71-0ubuntu1.12.10.1 | UNKNOWN |
| ubuntu | 13.04 | noarch | chromium-browser | < 28.0.1500.71-0ubuntu1.13.04.1 | UNKNOWN |
References
git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=2b0ff6d8a832f4fe5c187b17342b56675fbf7b96
git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=5449227016f44d7c023b28a697ada40064c681a6
googlechromereleases.blogspot.com/2013/07/stable-channel-update.html
code.google.com/p/chromium/issues/detail?id=242762
code.google.com/p/chromium/issues/detail?id=244746
launchpad.net/bugs/cve/CVE-2013-2870
nvd.nist.gov/vuln/detail/CVE-2013-2870
security-tracker.debian.org/tracker/CVE-2013-2870
www.cve.org/CVERecord?id=CVE-2013-2870
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
81.0%