Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

2013-03-0600:00:00

Tenable

www.tenable.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

80.2%

Versions of Google Chrome earlier than 25.0.1364.152 are potentially affected by the following vulnerabilities :

Use-after-free errors exist related to the frame loader, browser navigation handling and SVG animation. (CVE-2013-0902, CVE-2013-0903, CVE-2013-0905)
Memory corruption errors exist related to ‘Web Audio’ and ‘Indexed DB’. (CVE-2013-0904, CVE-2013-0906)
A race condition exists related to media thread handling. (CVE-2013-0907)
An unspecified error exists related to extension process bindings. (CVE-2013-0908)
The ‘XSS Auditor’ could leak referrer information. (CVE-2013-0909)
An unspecified error exists related to loading strictness and ‘Mediate renderer -> browser plug-in’. (CVE-2013-0910)
A path traversal error exists related to database handling. (CVE-2013-0911)