Vulnerability Details : CVE-2013-2833
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2013-2833
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.48:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.47:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.46:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.45:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.31:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.30:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.29:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.28:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.14:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.12:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.11:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.10:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.51:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.49:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.44:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.42:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.40:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.35:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.33:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.26:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.24:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.19:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.17:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.15:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.9:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.7:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.55:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.54:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.39:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.38:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.37:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.36:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.23:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.22:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.21:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.20:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.5:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.4:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.52:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.50:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.43:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.41:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.34:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.32:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.27:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.25:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.18:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.16:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.8:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.6:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:26.0.1410.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-2833
0.33%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-2833
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2013-2833
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-2833
-
http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git;a=commit;h=9181705680e1f53fd1e895ebe84c1b7f18c5c380
chromium Git repositories - Git at Google
-
https://code.google.com/p/chromium/issues/detail?id=227181
227181 - Security: UAF in O3D - chromium - Monorail
-
http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html
Chrome Releases: Stable Channel Update for Chrome OSVendor Advisory
Jump to