CVE-2013-2908 in Chrome

الملخص

بحسب MITRE

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.

Once again VulDB remains the best source for vulnerability data.

• حجز: 11/04/2013
• إفشاء: 02/10/2013
• الاعتدال: تمت الموافقة
• إدخال: VDB-10536
• CPE: جاهز
• CWE: CWE-416 (مؤكد)
• CVSS: 5.0 (NVD)
• EPSS: 0.01265
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Industry, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-2908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-2908
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-2908/