DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Chrome: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2013-10-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, Daten einsehen oder manipulieren oder um einen Denial of Service Zustand herbeizuführen.
01
beschreibt (19)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-2924US | high7.5 | — | ||
Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a deni… | ||||
| CVE-2013-2923US | high7.5 | — | ||
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. | ||||
| CVE-2013-2922US | medium6.8 | — | ||
Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or po… | ||||
| CVE-2013-2921US | medium6.8 | — | ||
Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1… | ||||
| CVE-2013-2920US | medium5.0 | — | ||
The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a… | ||||
| CVE-2013-2919US | high7.5 | — | ||
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unkn… | ||||
| CVE-2013-2918US | high7.5 | — | ||
Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome… | ||||
| CVE-2013-2917US | medium5.0 | — | ||
The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30… | ||||
| CVE-2013-2916US | medium4.3 | — | ||
Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in c… | ||||
| CVE-2013-2915US | medium4.3OT erhöht | — | ||
Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with… | ||||
| CVE-2013-2914US | medium6.8 | — | ||
Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspe… | ||||
| CVE-2013-2913US | medium6.8 | — | ||
Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remot… | ||||
| CVE-2013-2912US | high7.5 | — | ||
Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Ch… | ||||
| CVE-2013-2911US | medium6.8 | — | ||
Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows re… | ||||
| CVE-2013-2910US | high7.5 | — | ||
Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote… | ||||
| CVE-2013-2909US | high7.5 | — | ||
Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact… | ||||
| CVE-2013-2908US | medium5.0 | — | ||
Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vecto… | ||||
| CVE-2013-2907US | medium5.0 | — | ||
The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. | ||||
| CVE-2013-2906US | medium6.8 | — | ||
Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly hav… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Chrome Releases - Stable Channel Update vom 2013-10-01external
- Oracle Linux Security Advisory ELSA-2025-11888 vom 2025-07-29external
- Gentoo Linux Security Advisory GLSA 201402-14 vom 2014-02-15external
- Debian Security Advisory DSA-2785-1 vom 2013-10-26external
- Debian Security Advisory DSA-2786-1 vom 2013-10-28external
- Mandriva Security Advisory MDVSA-2013:258 vom 2013-10-28external
- Ubuntu Security Notice USN-1989-1 vom 2013-10-15external
- WID-SEC-W-2025-1657 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan