Buffer overflow in Opensuse - CVE-2013-0896

 

Buffer overflow in Opensuse - CVE-2013-0896

Published: February 23, 2013 / Updated: August 11, 2020


Vulnerability identifier: #VU43076
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-0896
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Affected software

Opensuse

How to mitigate CVE-2013-0896

Install update from vendor's website.


External References

Related Security Bulletins