CVE-2013-0900

MEDIUM

Description

Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

References

http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html

http://jvn.jp/en/jp/JVN70739377/index.html

http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html

http://www.debian.org/security/2013/dsa-2786

https://code.google.com/p/chromium/issues/detail?id=152442

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404

Details

Source: MITRE

Published: 2013-02-23

Updated: 2017-09-19

Type: CWE-362

Risk Information

CVSS v2.0

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM