PT-2013-2684 · Google · Skia+1

Published 2013-02-21 · Updated 2024-06-15 · CVE-2013-0888

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Skia versions prior to 25.0.1364.97 on Windows and Linux Skia versions prior to 25.0.1364.99 on Mac OS X

Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a "user gesture check for dangerous file downloads."

Recommendations For versions prior to 25.0.1364.97 on Windows and Linux, update to version 25.0.1364.97 or later. For versions prior to 25.0.1364.99 on Mac OS X, update to version 25.0.1364.99 or later.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2013-0888

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Google Chrome

Skia

References · 2341

• 🔥 https://code.google.com/p/chromium/issues/detail?id=170666 · Exploit
• http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0888 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-15974 · Note
• https://suse.com/security/cve/CVE-2019-13742 · Note
• https://suse.com/security/cve/CVE-2018-6106 · Note
• https://suse.com/security/cve/CVE-2019-5799 · Note
• https://suse.com/security/cve/CVE-2022-1497 · Note
• https://suse.com/security/cve/CVE-2022-2605 · Note
• https://suse.com/security/cve/CVE-2015-1293 · Note
• https://suse.com/security/cve/CVE-2019-5801 · Note
• https://suse.com/security/cve/CVE-2013-0899 · Note
• https://suse.com/security/cve/CVE-2020-6397 · Note