Lucene search

[email protected]CVE-2013-6621

HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-6621

2013-11-1315:55:04

CWE-399

[email protected]

web.nvd.nist.gov

cve-2013-6621

google chrome

vulnerability

denial of service

x-webkit-speech

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.

Affected configurations

NVD

Node

opensuseopensuseMatch12.2

opensuseopensuseMatch12.3

opensuseopensuseMatch13.1

Node

googlechromeRange≤31.0.1650.47

googlechromeMatch31.0.1650.0

googlechromeMatch31.0.1650.2

googlechromeMatch31.0.1650.3

googlechromeMatch31.0.1650.4

googlechromeMatch31.0.1650.5

googlechromeMatch31.0.1650.6

googlechromeMatch31.0.1650.7

googlechromeMatch31.0.1650.8

googlechromeMatch31.0.1650.9

googlechromeMatch31.0.1650.10

googlechromeMatch31.0.1650.11

googlechromeMatch31.0.1650.12

googlechromeMatch31.0.1650.13

googlechromeMatch31.0.1650.14

googlechromeMatch31.0.1650.15

googlechromeMatch31.0.1650.16

googlechromeMatch31.0.1650.17

googlechromeMatch31.0.1650.18

googlechromeMatch31.0.1650.19

googlechromeMatch31.0.1650.20

googlechromeMatch31.0.1650.22

googlechromeMatch31.0.1650.23

googlechromeMatch31.0.1650.25

googlechromeMatch31.0.1650.26

googlechromeMatch31.0.1650.27

googlechromeMatch31.0.1650.28

googlechromeMatch31.0.1650.29

googlechromeMatch31.0.1650.30

googlechromeMatch31.0.1650.31

googlechromeMatch31.0.1650.32

googlechromeMatch31.0.1650.33

googlechromeMatch31.0.1650.34

googlechromeMatch31.0.1650.35

googlechromeMatch31.0.1650.36

googlechromeMatch31.0.1650.37

googlechromeMatch31.0.1650.38

googlechromeMatch31.0.1650.39

googlechromeMatch31.0.1650.41

googlechromeMatch31.0.1650.42

googlechromeMatch31.0.1650.43

googlechromeMatch31.0.1650.44

googlechromeMatch31.0.1650.45

googlechromeMatch31.0.1650.46

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

CPENameOperatorVersion
opensuse:opensuseopensuseeq12.2
opensuse:opensuseopensuseeq12.3
opensuse:opensuseopensuseeq13.1

CPE	Name	Operator	Version
opensuse:opensuse	opensuse	eq	12.2
opensuse:opensuse	opensuse	eq	12.3
opensuse:opensuse	opensuse	eq	13.1

References

googlechromereleases.blogspot.com/2013/11/stable-channel-update.html

lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html

lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html

lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html

lists.opensuse.org/opensuse-updates/2014-01/msg00042.html

www.debian.org/security/2013/dsa-2799

code.google.com/p/chromium/issues/detail?id=268565

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19006

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

Related for CVE-2013-6621

debiancve1 cvelist1 ubuntucve1 nvd1 prion1 nessus11 threatpost1 openvas13 freebsd1 chrome1 mageia1 debian2 suse3 securityvulns2 osv1 gentoo1