Use-after-free in Google Chrome and Debian Linux - CVE-2013-2904

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU42639

Use-after-free in Google Chrome and Debian Linux - CVE-2013-2904

Published: August 21, 2013 / Updated: August 10, 2020


Vulnerability identifier: #VU42639
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2013-2904
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Google
Debian
Affected software:
Google Chrome
Debian Linux

Detailed vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


How to mitigate CVE-2013-2904

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Sources