HIGH
WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion."
Published Mar 11, 2013
7.5
HIGHCVSS 2.0
EPSS 4.27%
Description
WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion."
Affected products
No data.
OR
- 25.0.1364.0
- 25.0.1364.1
- 25.0.1364.2
- 25.0.1364.3
- 25.0.1364.5
- 25.0.1364.7
- 25.0.1364.8
- 25.0.1364.9
- 25.0.1364.10
- 25.0.1364.11
- 25.0.1364.12
- 25.0.1364.13
- 25.0.1364.14
- 25.0.1364.15
- 25.0.1364.16
- 25.0.1364.17
- 25.0.1364.18
- 25.0.1364.19
- 25.0.1364.20
- 25.0.1364.21
- 25.0.1364.22
- 25.0.1364.23
- 25.0.1364.24
- 25.0.1364.25
- 25.0.1364.26
- 25.0.1364.27
- 25.0.1364.28
- 25.0.1364.29
- 25.0.1364.30
- 25.0.1364.31
- 25.0.1364.32
- 25.0.1364.33
- 25.0.1364.34
- 25.0.1364.35
- 25.0.1364.36
- 25.0.1364.37
- 25.0.1364.38
- 25.0.1364.39
- 25.0.1364.40
- 25.0.1364.41
- 25.0.1364.42
- 25.0.1364.43
- 25.0.1364.44
- 25.0.1364.45
- 25.0.1364.46
- 25.0.1364.47
- 25.0.1364.48
- 25.0.1364.49
- 25.0.1364.50
- 25.0.1364.51
- 25.0.1364.52
- 25.0.1364.53
- 25.0.1364.54
- 25.0.1364.55
- 25.0.1364.56
- 25.0.1364.57
- 25.0.1364.58
- 25.0.1364.61
- 25.0.1364.62
- 25.0.1364.63
- 25.0.1364.65
- 25.0.1364.66
- 25.0.1364.67
- 25.0.1364.68
- 25.0.1364.70
- 25.0.1364.72
- 25.0.1364.73
- 25.0.1364.74
- 25.0.1364.75
- 25.0.1364.76
- 25.0.1364.77
- 25.0.1364.78
- 25.0.1364.79
- 25.0.1364.80
- 25.0.1364.81
- 25.0.1364.82
- 25.0.1364.84
- 25.0.1364.85
- 25.0.1364.86
- 25.0.1364.87
- 25.0.1364.88
- 25.0.1364.89
- 25.0.1364.90
- 25.0.1364.91
- 25.0.1364.92
- 25.0.1364.93
- 25.0.1364.95
- 25.0.1364.98
- 25.0.1364.99
- 25.0.1364.108
- 25.0.1364.110
- 25.0.1364.112
- 25.0.1364.113
- 25.0.1364.114
- 25.0.1364.115
- 25.0.1364.116
- 25.0.1364.117
- 25.0.1364.118
- 25.0.1364.119
- 25.0.1364.120
- 25.0.1364.121
- 25.0.1364.122
- 25.0.1364.123
- 25.0.1364.124
- 25.0.1364.125
- 25.0.1364.126
- 25.0.1364.152
- 25.0.1364.154
- 25.0.1364.155
- 25.0.1364.156
- 25.0.1364.159
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (10)
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html x_refsource_CONFIRM
- http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 x_refsource_MISC
- http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/ x_refsource_MISC
- http://lists.apple.com/archives/security-announce/2013/Apr/msg00000.html vendor-advisoryx_refsource_APPLE
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html vendor-advisoryx_refsource_APPLE
- http://support.apple.com/kb/HT5701 x_refsource_CONFIRM
- http://support.apple.com/kb/HT5704 x_refsource_CONFIRM
- http://twitter.com/thezdi/statuses/309460019131346944 x_refsource_MISC
- https://code.google.com/p/chromium/issues/detail?id=180763 x_refsource_CONFIRM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16274 vdb-entrysignaturex_refsource_OVAL
| Link | Providers | Tags |
|---|---|---|
| http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html | x_refsource_CONFIRM | |
| http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 | x_refsource_MISC | |
| http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/ | x_refsource_MISC | |
| http://lists.apple.com/archives/security-announce/2013/Apr/msg00000.html | vendor-advisoryx_refsource_APPLE | |
| http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html | vendor-advisoryx_refsource_APPLE | |
| http://support.apple.com/kb/HT5701 | x_refsource_CONFIRM | |
| http://support.apple.com/kb/HT5704 | x_refsource_CONFIRM | |
| http://twitter.com/thezdi/statuses/309460019131346944 | x_refsource_MISC | |
| https://code.google.com/p/chromium/issues/detail?id=180763 | x_refsource_CONFIRM | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16274 | vdb-entrysignaturex_refsource_OVAL |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Mar 11, 2013
Updated Aug 6, 2024
Reserved Jan 7, 2013
Link CVE-2013-0912
CISA Vulnrichment
Updated n/a