CVE-2013-2906 in Google Chrome

Summary

Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.

Reservation

04/11/2013

Disclosure

10/02/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
10165	Google Chrome webaudiosourceprovider_impl.cc provideInput race condition	362	Not defined	Official fix	CVE-2013-2906
10164	Google Chrome ConvolverNode.cpp tailTime race condition	362	Not defined	Official fix	CVE-2013-2906
10163	Google Chrome AudioDSPKernelProcessor.cpp race condition	362	Not defined	Official fix	CVE-2013-2906
10162	Google Chrome HRTFElevation.cpp audioBusMap race condition	362	Not defined	Official fix	CVE-2013-2906
10161	Google Chrome ConvolverNode.cpp latencyFrames race condition	362	Not defined	Official fix	CVE-2013-2906