CVE-2013-2925 in Chrome

Sumário

de MITRE

Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 11/04/2013
• Divulgação: 16/10/2013
• Moderação: aceite
• Entrada: VDB-10842
• CPE: pronto
• CWE: CWE-399 (confirmado)
• CVSS: 6.8 (NVD)
• EPSS: 0.01406
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Hospital, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-2925
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-2925
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-2925/