CVE-2013-2908 in Chrome

Resumen

por MITRE

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 2013-04-11
• Divulgación: 2013-10-02
• Moderación: aceptado
• Artículo: VDB-10536
• CPE: listo
• CWE: CWE-416 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.01265
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Chemical, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-2908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-2908
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-2908/