6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.4 High
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.4%
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
code.google.com/p/chromium/issues/detail?id=136881
googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
osvdb.org/85033
exchange.xforce.ibmcloud.com/vulnerabilities/78177
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15842