PT-2013-6051 · Google+2 · Google Chrome+2

Publicado

2013-11-12

·

Atualizado

2024-06-15

·

CVE-2013-6621

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.48
Description The issue is related to a use-after-free vulnerability. It can be triggered via vectors related to the x-webkit-speech attribute in a text INPUT element, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts.
Recommendations For versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later to resolve the issue. As a temporary workaround, consider disabling the x-webkit-speech attribute in text INPUT elements until a patch is applied.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2013-1119
CVE-2013-6621
DSA-2799-1
MGASA-2013-0324
OPENSUSE-SU-2013_1776-1
OPENSUSE-SU-2013_1777-1
OPENSUSE-SU-2013_1861-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux
Google Chrome
Suse