7.5

CVE-2013-6650

Exploit
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Google ≫ Chrome Version <= 32.0.1700.101
Google ≫ Chrome Version 32.0.1700.0
Google ≫ Chrome Version 32.0.1700.2
Google ≫ Chrome Version 32.0.1700.3
Google ≫ Chrome Version 32.0.1700.4
Google ≫ Chrome Version 32.0.1700.5
Google ≫ Chrome Version 32.0.1700.6
Google ≫ Chrome Version 32.0.1700.7
Google ≫ Chrome Version 32.0.1700.8
Google ≫ Chrome Version 32.0.1700.9
Google ≫ Chrome Version 32.0.1700.10
Google ≫ Chrome Version 32.0.1700.11
Google ≫ Chrome Version 32.0.1700.12
Google ≫ Chrome Version 32.0.1700.13
Google ≫ Chrome Version 32.0.1700.14
Google ≫ Chrome Version 32.0.1700.15
Google ≫ Chrome Version 32.0.1700.16
Google ≫ Chrome Version 32.0.1700.17
Google ≫ Chrome Version 32.0.1700.18
Google ≫ Chrome Version 32.0.1700.19
Google ≫ Chrome Version 32.0.1700.21
Google ≫ Chrome Version 32.0.1700.22
Google ≫ Chrome Version 32.0.1700.23
Google ≫ Chrome Version 32.0.1700.24
Google ≫ Chrome Version 32.0.1700.26
Google ≫ Chrome Version 32.0.1700.27
Google ≫ Chrome Version 32.0.1700.28
Google ≫ Chrome Version 32.0.1700.29
Google ≫ Chrome Version 32.0.1700.30
Google ≫ Chrome Version 32.0.1700.31
Google ≫ Chrome Version 32.0.1700.32
Google ≫ Chrome Version 32.0.1700.33
Google ≫ Chrome Version 32.0.1700.34
Google ≫ Chrome Version 32.0.1700.35
Google ≫ Chrome Version 32.0.1700.38
Google ≫ Chrome Version 32.0.1700.39
Google ≫ Chrome Version 32.0.1700.41
Google ≫ Chrome Version 32.0.1700.50
Google ≫ Chrome Version 32.0.1700.51
Google ≫ Chrome Version 32.0.1700.52
Google ≫ Chrome Version 32.0.1700.53
Google ≫ Chrome Version 32.0.1700.54
Google ≫ Chrome Version 32.0.1700.55
Google ≫ Chrome Version 32.0.1700.56
Google ≫ Chrome Version 32.0.1700.57
Google ≫ Chrome Version 32.0.1700.58
Google ≫ Chrome Version 32.0.1700.59
Google ≫ Chrome Version 32.0.1700.62
Google ≫ Chrome Version 32.0.1700.63
Google ≫ Chrome Version 32.0.1700.64
Google ≫ Chrome Version 32.0.1700.65
Google ≫ Chrome Version 32.0.1700.66
Google ≫ Chrome Version 32.0.1700.67
Google ≫ Chrome Version 32.0.1700.68
Google ≫ Chrome Version 32.0.1700.69
Google ≫ Chrome Version 32.0.1700.70
Google ≫ Chrome Version 32.0.1700.71
Google ≫ Chrome Version 32.0.1700.72
Google ≫ Chrome Version 32.0.1700.74
Google ≫ Chrome Version 32.0.1700.75
Google ≫ Chrome Version 32.0.1700.76
Google ≫ Chrome Version 32.0.1700.77
Google ≫ Chrome Version 32.0.1700.94
Google ≫ Chrome Version 32.0.1700.95
Google ≫ Chrome Version 32.0.1700.96
Google ≫ Chrome Version 32.0.1700.97
Google ≫ Chrome Version 32.0.1700.98
Google ≫ Chrome Version 32.0.1700.99
Google ≫ Chrome Version 32.0.1700.100
Opensuse ≫ Opensuse Version 12.3
Opensuse ≫ Opensuse Version 13.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.05% 0.79
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html
Third Party Advisory
http://www.debian.org/security/2014/dsa-2862
Third Party Advisory
http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html
Vendor Advisory
Release Notes
http://crbug.com/331444
Exploit
https://code.google.com/p/v8/source/detail?r=18483