6.8

CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 26.0.1410.42
Google ≫ Chrome Version26.0.1410.0
Google ≫ Chrome Version26.0.1410.1
Google ≫ Chrome Version26.0.1410.2
Google ≫ Chrome Version26.0.1410.3
Google ≫ Chrome Version26.0.1410.4
Google ≫ Chrome Version26.0.1410.5
Google ≫ Chrome Version26.0.1410.6
Google ≫ Chrome Version26.0.1410.7
Google ≫ Chrome Version26.0.1410.8
Google ≫ Chrome Version26.0.1410.9
Google ≫ Chrome Version26.0.1410.10
Google ≫ Chrome Version26.0.1410.11
Google ≫ Chrome Version26.0.1410.12
Google ≫ Chrome Version26.0.1410.14
Google ≫ Chrome Version26.0.1410.15
Google ≫ Chrome Version26.0.1410.16
Google ≫ Chrome Version26.0.1410.17
Google ≫ Chrome Version26.0.1410.18
Google ≫ Chrome Version26.0.1410.19
Google ≫ Chrome Version26.0.1410.20
Google ≫ Chrome Version26.0.1410.21
Google ≫ Chrome Version26.0.1410.22
Google ≫ Chrome Version26.0.1410.23
Google ≫ Chrome Version26.0.1410.24
Google ≫ Chrome Version26.0.1410.25
Google ≫ Chrome Version26.0.1410.26
Google ≫ Chrome Version26.0.1410.27
Google ≫ Chrome Version26.0.1410.28
Google ≫ Chrome Version26.0.1410.29
Google ≫ Chrome Version26.0.1410.30
Google ≫ Chrome Version26.0.1410.31
Google ≫ Chrome Version26.0.1410.32
Google ≫ Chrome Version26.0.1410.33
Google ≫ Chrome Version26.0.1410.34
Google ≫ Chrome Version26.0.1410.35
Google ≫ Chrome Version26.0.1410.36
Google ≫ Chrome Version26.0.1410.37
Google ≫ Chrome Version26.0.1410.38
Google ≫ Chrome Version26.0.1410.39
Google ≫ Chrome Version26.0.1410.40
Google ≫ Chrome Version26.0.1410.41
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.11% 0.616
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://secunia.com/advisories/54886
http://support.apple.com/kb/HT5934
http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
http://support.apple.com/kb/HT5785
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
http://git.chromium.org/gitweb/?p=chromium/src.git%3Ba=commit%3Bh=52a30db57ecec68bb3b25fdc3de5e9bee7b80ed7
https://chromiumcodereview.appspot.com/11884025
https://code.google.com/p/chromium/issues/detail?id=112325
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16601
https://src.chromium.org/viewvc/chrome?view=rev&revision=176856