Input validation error in Google Chrome - CVE-2013-0908

 

Input validation error in Google Chrome - CVE-2013-0908

Published: March 5, 2013 / Updated: August 11, 2020


Vulnerability identifier: #VU43035
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-0908
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors.


Affected software

Google Chrome

How to mitigate CVE-2013-0908

Install update from vendor's website.


External References

Related Security Bulletins