CVE-2013-0879

HIGH

Description

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implement web audio nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

References

http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html

http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html

http://secunia.com/advisories/54886

http://support.apple.com/kb/HT5785

http://support.apple.com/kb/HT5934

https://code.google.com/p/chromium/issues/detail?id=172243

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16505

Details

Source: MITRE

Published: 2013-02-23

Updated: 2017-09-19

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 7.5

Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH