CVE-2013-0885

2013-02-2300:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

55.4%

JSON

Google Chrome before 25.0.1364.97 on Windows and Linux, and before
25.0.1364.99 on Mac OS X, does not properly restrict API privileges during
interaction with the Chrome Web Store, which has unspecified impact and
attack vectors.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1132568>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 25.0.1364.160-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 25.0.1364.160-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchchromium-browser< 25.0.1364.160-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchchromium-browser< 25.0.1364.160-0ubuntu0.12.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	chromium-browser	< 25.0.1364.160-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	chromium-browser	< 25.0.1364.160-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	chromium-browser	< 25.0.1364.160-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	chromium-browser	< 25.0.1364.160-0ubuntu0.12.10.1	UNKNOWN