ID CVE-2013-2836
Summary Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
References
Vulnerable Configurations
  • Google Chrome 27.0.1453.91
    cpe:2.3:a:google:chrome:27.0.1453.91
  • Google Chrome 27.0.1453.90
    cpe:2.3:a:google:chrome:27.0.1453.90
  • Google Chrome 27.0.1453.89
    cpe:2.3:a:google:chrome:27.0.1453.89
  • Google Chrome 27.0.1453.88
    cpe:2.3:a:google:chrome:27.0.1453.88
  • Google Chrome 27.0.1453.87
    cpe:2.3:a:google:chrome:27.0.1453.87
  • Google Chrome 27.0.1453.86
    cpe:2.3:a:google:chrome:27.0.1453.86
  • Google Chrome 27.0.1453.85
    cpe:2.3:a:google:chrome:27.0.1453.85
  • Google Chrome 27.0.1453.84
    cpe:2.3:a:google:chrome:27.0.1453.84
  • Google Chrome 27.0.1453.83
    cpe:2.3:a:google:chrome:27.0.1453.83
  • Google Chrome 27.0.1453.82
    cpe:2.3:a:google:chrome:27.0.1453.82
  • Google Chrome 27.0.1453.81
    cpe:2.3:a:google:chrome:27.0.1453.81
  • Google Chrome 27.0.1453.80
    cpe:2.3:a:google:chrome:27.0.1453.80
  • Google Chrome 27.0.1453.79
    cpe:2.3:a:google:chrome:27.0.1453.79
  • Google Chrome 27.0.1453.78
    cpe:2.3:a:google:chrome:27.0.1453.78
  • Google Chrome 27.0.1453.77
    cpe:2.3:a:google:chrome:27.0.1453.77
  • Google Chrome 27.0.1453.76
    cpe:2.3:a:google:chrome:27.0.1453.76
  • Google Chrome 27.0.1453.75
    cpe:2.3:a:google:chrome:27.0.1453.75
  • Google Chrome 27.0.1453.74
    cpe:2.3:a:google:chrome:27.0.1453.74
  • Google Chrome 27.0.1453.73
    cpe:2.3:a:google:chrome:27.0.1453.73
  • Google Chrome 27.0.1453.72
    cpe:2.3:a:google:chrome:27.0.1453.72
  • Google Chrome 27.0.1453.71
    cpe:2.3:a:google:chrome:27.0.1453.71
  • Google Chrome 27.0.1453.70
    cpe:2.3:a:google:chrome:27.0.1453.70
  • Google Chrome 27.0.1453.69
    cpe:2.3:a:google:chrome:27.0.1453.69
  • Google Chrome 27.0.1453.68
    cpe:2.3:a:google:chrome:27.0.1453.68
  • Google Chrome 27.0.1453.67
    cpe:2.3:a:google:chrome:27.0.1453.67
  • Google Chrome 27.0.1453.66
    cpe:2.3:a:google:chrome:27.0.1453.66
  • Google Chrome 27.0.1453.65
    cpe:2.3:a:google:chrome:27.0.1453.65
  • Google Chrome 27.0.1453.64
    cpe:2.3:a:google:chrome:27.0.1453.64
  • Google Chrome 27.0.1453.63
    cpe:2.3:a:google:chrome:27.0.1453.63
  • Google Chrome 27.0.1453.62
    cpe:2.3:a:google:chrome:27.0.1453.62
  • Google Chrome 27.0.1453.61
    cpe:2.3:a:google:chrome:27.0.1453.61
  • Google Chrome 27.0.1453.60
    cpe:2.3:a:google:chrome:27.0.1453.60
  • Google Chrome 27.0.1453.59
    cpe:2.3:a:google:chrome:27.0.1453.59
  • Google Chrome 27.0.1453.58
    cpe:2.3:a:google:chrome:27.0.1453.58
  • Google Chrome 27.0.1453.57
    cpe:2.3:a:google:chrome:27.0.1453.57
  • Google Chrome 27.0.1453.56
    cpe:2.3:a:google:chrome:27.0.1453.56
  • Google Chrome 27.0.1453.55
    cpe:2.3:a:google:chrome:27.0.1453.55
  • Google Chrome 27.0.1453.54
    cpe:2.3:a:google:chrome:27.0.1453.54
  • Google Chrome 27.0.1453.52
    cpe:2.3:a:google:chrome:27.0.1453.52
  • Google Chrome 27.0.1453.51
    cpe:2.3:a:google:chrome:27.0.1453.51
  • Google Chrome 27.0.1453.50
    cpe:2.3:a:google:chrome:27.0.1453.50
  • Google Chrome 27.0.1453.49
    cpe:2.3:a:google:chrome:27.0.1453.49
  • Google Chrome 27.0.1453.47
    cpe:2.3:a:google:chrome:27.0.1453.47
  • Google Chrome 27.0.1453.46
    cpe:2.3:a:google:chrome:27.0.1453.46
  • Google Chrome 27.0.1453.45
    cpe:2.3:a:google:chrome:27.0.1453.45
  • Google Chrome 27.0.1453.44
    cpe:2.3:a:google:chrome:27.0.1453.44
  • Google Chrome 27.0.1453.43
    cpe:2.3:a:google:chrome:27.0.1453.43
  • Google Chrome 27.0.1453.42
    cpe:2.3:a:google:chrome:27.0.1453.42
  • Google Chrome 27.0.1453.41
    cpe:2.3:a:google:chrome:27.0.1453.41
  • Google Chrome 27.0.1453.40
    cpe:2.3:a:google:chrome:27.0.1453.40
  • Google Chrome 27.0.1453.39
    cpe:2.3:a:google:chrome:27.0.1453.39
  • Google Chrome 27.0.1453.38
    cpe:2.3:a:google:chrome:27.0.1453.38
  • Google Chrome 27.0.1453.37
    cpe:2.3:a:google:chrome:27.0.1453.37
  • Google Chrome 27.0.1453.36
    cpe:2.3:a:google:chrome:27.0.1453.36
  • Google Chrome 27.0.1453.35
    cpe:2.3:a:google:chrome:27.0.1453.35
  • Google Chrome 27.0.1453.34
    cpe:2.3:a:google:chrome:27.0.1453.34
  • Google Chrome 27.0.1453.15
    cpe:2.3:a:google:chrome:27.0.1453.15
  • Google Chrome 27.0.1453.13
    cpe:2.3:a:google:chrome:27.0.1453.13
  • Google Chrome 27.0.1453.12
    cpe:2.3:a:google:chrome:27.0.1453.12
  • Google Chrome 27.0.1453.11
    cpe:2.3:a:google:chrome:27.0.1453.11
  • Google Chrome 27.0.1453.0
    cpe:2.3:a:google:chrome:27.0.1453.0
  • Google Chrome 27.0.1453.1
    cpe:2.3:a:google:chrome:27.0.1453.1
  • Google Chrome 27.0.1453.2
    cpe:2.3:a:google:chrome:27.0.1453.2
  • Google Chrome 27.0.1453.3
    cpe:2.3:a:google:chrome:27.0.1453.3
  • Google Chrome 27.0.1453.4
    cpe:2.3:a:google:chrome:27.0.1453.4
  • Google Chrome 27.0.1453.5
    cpe:2.3:a:google:chrome:27.0.1453.5
  • Google Chrome 27.0.1453.6
    cpe:2.3:a:google:chrome:27.0.1453.6
  • Google Chrome 27.0.1453.7
    cpe:2.3:a:google:chrome:27.0.1453.7
  • Google Chrome 27.0.1453.8
    cpe:2.3:a:google:chrome:27.0.1453.8
  • Google Chrome 27.0.1453.9
    cpe:2.3:a:google:chrome:27.0.1453.9
  • Google Chrome 27.0.1453.10
    cpe:2.3:a:google:chrome:27.0.1453.10
CVSS
Base: 7.5 (as of 22-05-2013 - 10:52)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
nessus via4
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_358133B5C2B911E2A73800262D5ED8EE.NASL
    description Google Chrome Releases reports : [235638] High CVE-2013-2837: Use-after-free in SVG. Credit to Slawomir Blazek. [235311] Medium CVE-2013-2838: Out-of-bounds read in v8. Credit to Christian Holler. [230176] High CVE-2013-2839: Bad cast in clipboard handling. Credit to Jon of MWR InfoSecurity. [230117] High CVE-2013-2840: Use-after-free in media loader. Credit to Nils of MWR InfoSecurity. [227350] High CVE-2013-2841: Use-after-free in Pepper resource handling. Credit to Chamal de Silva. [226696] High CVE-2013-2842: Use-after-free in widget handling. Credit to Cyril Cattiaux. [222000] High CVE-2013-2843: Use-after-free in speech handling. Credit to Khalil Zhani. [196393] High CVE-2013-2844: Use-after-free in style resolution. Credit to Sachin Shinde (@cons0ul). [188092] [179522] [222136] [188092] High CVE-2013-2845: Memory safety issues in Web Audio. Credit to Atte Kettunen of OUSPG. [177620] High CVE-2013-2846: Use-after-free in media loader. Credit to Chamal de Silva. [176692] High CVE-2013-2847: Use-after-free race condition with workers. Credit to Collin Payne. [176137] Medium CVE-2013-2848: Possible data extraction with XSS Auditor. Credit to Egor Homakov. [171392] Low CVE-2013-2849: Possible XSS with drag+drop or copy+paste. Credit to Mario Heiderich. [241595] High CVE-2013-2836: Various fixes from internal audits, fuzzing and other initiatives.
    last seen 2019-02-21
    modified 2013-06-21
    plugin id 66549
    published 2013-05-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=66549
    title FreeBSD : chromium -- multiple vulnerabilities (358133b5-c2b9-11e2-a738-00262d5ed8ee)
  • NASL family Windows
    NASL id GOOGLE_CHROME_27_0_1453_93.NASL
    description The version of Google Chrome installed on the remote host is a version prior to 27.0.1453.93 and is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist in SVG, media loader, Pepper resource handling, widget handling, speech handling, style resolution, media loader, and related to race condition with workers. (CVE-2013-2837, CVE-2013-2840, CVE-2013-2841, CVE-2013-2842, CVE-2013-2843, CVE-2013-2844, CVE-2013-2846, CVE-2013-2847) - An out-of-bounds read error exists in v8. (CVE-2013-2838) - A memory corruption vulnerability exists related to a bad casting in clipboard handling. (CVE-2013-2839) - A memory safety issue exists related to Web Audio. (CVE-2013-2845) - An information disclosure vulnerability exists related to XSS Auditor. (CVE-2013-2848) - A cross-site scripting vulnerability exists related to drag and drop or copy and paste. (CVE-2013-2849)
    last seen 2019-02-21
    modified 2018-11-15
    plugin id 66556
    published 2013-05-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=66556
    title Google Chrome < 27.0.1453.93 Multiple Vulnerabilities
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201309-16.NASL
    description The remote host is affected by the vulnerability described in GLSA-201309-16 (Chromium, V8: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details. Impact : A context-dependent attacker could entice a user to open a specially crafted website or JavaScript program using Chromium or V8, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass security restrictions or have other, unspecified, impact. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-12
    plugin id 70112
    published 2013-09-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=70112
    title GLSA-201309-16 : Chromium, V8: Multiple vulnerabilities
oval via4
accepted 2013-08-12T04:08:38.677-04:00
class vulnerability
contributors
  • name Shane Shaffer
    organization G2, Inc.
  • name Maria Kedovskaya
    organization ALTX-SOFT
definition_extensions
comment Google Chrome is installed
oval oval:org.mitre.oval:def:11914
description Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
family windows
id oval:org.mitre.oval:def:16609
status accepted
submitted 2013-05-28T12:09:14.598-04:00
title Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93
version 42
refmap via4
confirm
Last major update 02-11-2013 - 23:32
Published 22-05-2013 - 09:29
Last modified 18-09-2017 - 21:36
Back to Top