PT-2014-3147 · Google+2 · Google Chrome+2

Published 2014-01-16 · Updated 2024-06-15 · CVE-2013-6645

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 32.0.1700.76 on Windows Google Chrome versions prior to 32.0.1700.77 on Mac OS X and Linux

Description A use-after-free issue exists in the OnWindowRemovingFromRootWindow function, which can be triggered by user-assisted remote attackers through certain actions involving print-preview and tab-switching that interact with a speech input element, potentially causing a denial of service or other unspecified impacts.

Recommendations For Google Chrome versions prior to 32.0.1700.76 on Windows, update to version 32.0.1700.76 or later. For Google Chrome versions prior to 32.0.1700.77 on Mac OS X and Linux, update to version 32.0.1700.77 or later.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2014-1088

CVE-2013-6645

DSA-2862-1

MGASA-2014-0037

OPENSUSE-SU-2014_0243-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

Suse

References · 2381

• 🔥 https://code.google.com/p/chromium/issues/detail?id=318791 · Exploit
• http://code.google.com/p/chromium/issues/detail?id=320183 · Vendor Advisory
• http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6645 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6643 · Security Note
• http://debian.org/security/2014/dsa-2862 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6645 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1088 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0037.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6641 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6646 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html · Vendor Advisory