PT-2013-2684 · Google · Skia+1

Publicado 2013-02-21 · Atualizado 2024-06-15 · CVE-2013-0888

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Skia versions prior to 25.0.1364.97 on Windows and Linux Skia versions prior to 25.0.1364.99 on Mac OS X

Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a "user gesture check for dangerous file downloads."

Recommendations For versions prior to 25.0.1364.97 on Windows and Linux, update to version 25.0.1364.97 or later. For versions prior to 25.0.1364.99 on Mac OS X, update to version 25.0.1364.99 or later.

Exploit

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2013-0888

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Produtos afetados

Google Chrome

Skia

Referências · 2341

• 🔥 https://code.google.com/p/chromium/issues/detail?id=170666 · Exploit
• https://suse.com/security/cve/CVE-2020-15974 · Nota
• https://suse.com/security/cve/CVE-2019-13742 · Nota
• https://suse.com/security/cve/CVE-2018-6106 · Nota
• https://suse.com/security/cve/CVE-2019-5799 · Nota
• https://suse.com/security/cve/CVE-2022-1497 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2015-1293 · Nota
• https://suse.com/security/cve/CVE-2019-5801 · Nota
• https://suse.com/security/cve/CVE-2013-0899 · Nota
• https://suse.com/security/cve/CVE-2020-6397 · Nota
• https://suse.com/security/cve/CVE-2022-3449 · Nota
• https://suse.com/security/cve/CVE-2012-2815 · Nota
• https://suse.com/security/cve/CVE-2021-30564 · Nota
• https://suse.com/security/cve/CVE-2023-0927 · Nota