Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2013-2842

Published: 22/05/2013 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Iphone Os

Vulnerability Summary

Use-after-free vulnerability in Google Chrome prior to 27.0.1453.93 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os 6.1.2

apple iphone os 3.0

apple iphone os 3.2

apple iphone os 3.1.3

apple iphone os 1.0.2

apple iphone os 4.3.2

apple iphone os 4.0.2

apple iphone os

apple iphone os 2.2

apple iphone os 1.1.1

apple iphone os 6.1.3

apple iphone os 5.1

apple iphone os 4.2.8

apple iphone os 6.0.2

apple iphone os 4.1

apple iphone os 2.0.0

apple iphone os 3.1.2

apple iphone os 3.0.1

apple iphone os 4.3.1

apple iphone os 4.2.5

apple iphone os 1.1.2

apple iphone os 3.1

apple iphone os 1.1.3

apple iphone os 1.1.0

apple iphone os 1.0.1

apple iphone os 2.1

apple iphone os 6.0

apple iphone os 4.3.5

apple iphone os 6.1

apple iphone os 4.2.1

apple iphone os 1.1.5

apple iphone os 4.0.1

apple iphone os 4.3.3

apple iphone os 5.0.1

apple iphone os 2.1.1

apple iphone os 1.1.4

apple iphone os 5.0

apple iphone os 1.0.0

apple iphone os 5.1.1

apple iphone os 2.0.2

apple iphone os 2.0

apple iphone os 2.0.1

apple iphone os 4.0

apple iphone os 4.3.0

apple iphone os 2.2.1

apple iphone os 3.2.1

apple iphone os 3.2.2

apple iphone os 6.0.1

google chrome 27.0.1453.77

google chrome 27.0.1453.74

google chrome 27.0.1453.61

google chrome 27.0.1453.62

google chrome 27.0.1453.34

google chrome 27.0.1453.11

google chrome 27.0.1453.47

google chrome 27.0.1453.81

google chrome 27.0.1453.54

google chrome 27.0.1453.41

google chrome 27.0.1453.10

google chrome 27.0.1453.42

google chrome 27.0.1453.59

google chrome 27.0.1453.7

google chrome 27.0.1453.70

google chrome 27.0.1453.69

google chrome 27.0.1453.51

google chrome 27.0.1453.6

google chrome 27.0.1453.38

google chrome 27.0.1453.65

google chrome 27.0.1453.56

google chrome 27.0.1453.71

google chrome 27.0.1453.84

google chrome 27.0.1453.57

google chrome 27.0.1453.58

google chrome 27.0.1453.68

google chrome 27.0.1453.73

google chrome 27.0.1453.35

google chrome 27.0.1453.86

google chrome 27.0.1453.76

google chrome 27.0.1453.36

google chrome 27.0.1453.4

google chrome 27.0.1453.37

google chrome 27.0.1453.89

google chrome 27.0.1453.52

google chrome 27.0.1453.88

google chrome 27.0.1453.1

google chrome 27.0.1453.90

google chrome 27.0.1453.39

google chrome

google chrome 27.0.1453.13

google chrome 27.0.1453.9

google chrome 27.0.1453.44

google chrome 27.0.1453.78

google chrome 27.0.1453.40

google chrome 27.0.1453.3

google chrome 27.0.1453.85

google chrome 27.0.1453.43

google chrome 27.0.1453.49

google chrome 27.0.1453.80

google chrome 27.0.1453.87

google chrome 27.0.1453.64

google chrome 27.0.1453.0

google chrome 27.0.1453.67

google chrome 27.0.1453.45

google chrome 27.0.1453.55

google chrome 27.0.1453.82

google chrome 27.0.1453.75

google chrome 27.0.1453.46

google chrome 27.0.1453.83

google chrome 27.0.1453.72

google chrome 27.0.1453.15

google chrome 27.0.1453.60

google chrome 27.0.1453.50

google chrome 27.0.1453.63

google chrome 27.0.1453.2

google chrome 27.0.1453.8

google chrome 27.0.1453.66

google chrome 27.0.1453.79

google chrome 27.0.1453.5

google chrome 27.0.1453.12

Vendor Advisories

Debian Security Advisories: DSA-2695-1 chromium-browser -- several issues
Several vulnerabilities have been discovered in the Chromium web browser Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to cause a denial of service or possibly have unspe ...

Exploits

Exploit DB: Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)
#---object-beforeload-chromehtml---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------# <html> <head> <script> function sprayOne(mem, size, v) { v ...

Github Repositories

https://github.com/wiiudev/libwiiu

Build system and examples for running C code on the Wii U

README This repository contains a way to run code inside the Wii U's web browser It provides a means to execute arbitrary code in the Cafe OS userspace on the Espresso processor Also included is a Cafe OS kernel exploit, which runs in the Espresso's user-mode The exploits in this repository do not provide any access to IOSU on the Starbuck We hope to implement thi

References

CWE-399http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.htmlhttp://support.apple.com/kb/HT6001http://www.debian.org/security/2013/dsa-2695http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.htmlhttp://secunia.com/advisories/54886http://support.apple.com/kb/HT5934http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15914https://code.google.com/p/chromium/issues/detail?id=226696http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlhttps://nvd.nist.govhttps://www.debian.org/security/./dsa-2695https://github.com/wiiudev/libwiiuhttps://www.exploit-db.com/exploits/40243/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook