7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.4%
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.
CPE | Name | Operator | Version |
---|---|---|---|
iphone_os | le | 6.0.2 | |
iphone_os | eq | 6.0 | |
iphone_os | eq | 6.0.1 | |
chrome | eq | 20.0.1132.37 | |
chrome | eq | 20.0.1132.16 | |
chrome | eq | 20.0.1132.14 | |
chrome | eq | 20.0.1132.22 | |
chrome | eq | 20.0.1132.30 | |
chrome | eq | 20.0.1132.26 | |
chrome | eq | 20.0.1132.2 |
lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
lists.apple.com/archives/security-announce/2013/Mar/msg00003.html
support.apple.com/kb/HT5642
code.google.com/p/chromium/issues/detail?id=125374
googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15666