PT-2013-6118 · Google+1 · Google Chrome+1

Pinkie Pie · Published 2013-11-16 · Updated 2018-12-13 · CVE-2013-6802

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.57

Description The issue allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process. This was demonstrated during a Mobile Pwn2Own competition at PacSec 2013.

Recommendations For versions prior to 31.0.1650.57, update to version 31.0.1650.57 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2013-1266

CVE-2013-6802

DSA-2799-1

Affected Products

Alt Linux

Google Chrome

References · 17

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6638 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6634 · Security Note
• http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6802 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6635 · Security Note
• https://code.google.com/p/chromium/issues/detail?id=319117 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6640 · Security Note
• https://errata.altlinux.org/ALT-PU-2013-1266 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6637 · Security Note
• https://code.google.com/p/chromium/issues/detail?id=319125 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6636 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6802 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6639 · Security Note
• http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html · Vendor Advisory
• https://packages.altlinux.org/ru/vuln/CVE-2013-6802 · Note