6.8

CVE-2013-2632

Exploit

EPSS 0.49%
Veröffentlicht 21.03.2013 21:55:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 27.0.1444.0

Google ≫ V8 Version <= 3.17.12

Google ≫ V8 Version3.17.0

Google ≫ V8 Version3.17.1

Google ≫ V8 Version3.17.2

Google ≫ V8 Version3.17.3

Google ≫ V8 Version3.17.4

Google ≫ V8 Version3.17.5

Google ≫ V8 Version3.17.6

Google ≫ V8 Version3.17.7

Google ≫ V8 Version3.17.8

Google ≫ V8 Version3.17.9

Google ≫ V8 Version3.17.10

Google ≫ V8 Version3.17.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.629

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://code.google.com/p/v8/source/browse/trunk/ChangeLog

http://googlechromereleases.blogspot.com/2013/03/dev-channel-update_18.html

Vendor Advisory

https://code.google.com/p/chromium/issues/detail?id=194749

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2013-2632

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2632

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2632

EUVD