HIGH
Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors
Published Jun 5, 2013
7.5
HIGHCVSS 2.0
EPSS 1.09%
Description
Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors.
Affected products
No data.
Configuration 1
OR
- 7.0
- 8.0
Configuration 2
OR
- ≤ 27.0.1453.109
- 27.0.1453.0
- 27.0.1453.1
- 27.0.1453.2
- 27.0.1453.3
- 27.0.1453.4
- 27.0.1453.5
- 27.0.1453.6
- 27.0.1453.7
- 27.0.1453.8
- 27.0.1453.9
- 27.0.1453.10
- 27.0.1453.11
- 27.0.1453.12
- 27.0.1453.13
- 27.0.1453.15
- 27.0.1453.34
- 27.0.1453.35
- 27.0.1453.36
- 27.0.1453.37
- 27.0.1453.38
- 27.0.1453.39
- 27.0.1453.40
- 27.0.1453.41
- 27.0.1453.42
- 27.0.1453.43
- 27.0.1453.44
- 27.0.1453.45
- 27.0.1453.46
- 27.0.1453.47
- 27.0.1453.49
- 27.0.1453.50
- 27.0.1453.51
- 27.0.1453.52
- 27.0.1453.54
- 27.0.1453.55
- 27.0.1453.56
- 27.0.1453.57
- 27.0.1453.58
- 27.0.1453.59
- 27.0.1453.60
- 27.0.1453.61
- 27.0.1453.62
- 27.0.1453.63
- 27.0.1453.64
- 27.0.1453.65
- 27.0.1453.66
- 27.0.1453.67
- 27.0.1453.68
- 27.0.1453.69
- 27.0.1453.70
- 27.0.1453.71
- 27.0.1453.72
- 27.0.1453.73
- 27.0.1453.74
- 27.0.1453.75
- 27.0.1453.76
- 27.0.1453.77
- 27.0.1453.78
- 27.0.1453.79
- 27.0.1453.80
- 27.0.1453.81
- 27.0.1453.82
- 27.0.1453.83
- 27.0.1453.84
- 27.0.1453.85
- 27.0.1453.86
- 27.0.1453.87
- 27.0.1453.88
- 27.0.1453.89
- 27.0.1453.90
- 27.0.1453.91
- 27.0.1453.93
- 27.0.1453.94
- 27.0.1453.102
- 27.0.1453.103
- 27.0.1453.104
- 27.0.1453.105
- 27.0.1453.106
- 27.0.1453.107
- 27.0.1453.108
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (4)
- http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html x_refsource_CONFIRM
- http://www.debian.org/security/2013/dsa-2706 vendor-advisoryx_refsource_DEBIAN
- https://code.google.com/p/chromium/issues/detail?id=237022 x_refsource_CONFIRM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16640 vdb-entrysignaturex_refsource_OVAL
| Link | Providers | Tags |
|---|---|---|
| http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html | x_refsource_CONFIRM | |
| http://www.debian.org/security/2013/dsa-2706 | vendor-advisoryx_refsource_DEBIAN | |
| https://code.google.com/p/chromium/issues/detail?id=237022 | x_refsource_CONFIRM | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16640 | vdb-entrysignaturex_refsource_OVAL |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Jun 5, 2013
Updated Aug 6, 2024
Reserved Apr 11, 2013
Link CVE-2013-2859
CISA Vulnrichment
Updated n/a