Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0894 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:47.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size. Additional Analyst Notes: - CVE Program Container: References: - htt
vectors involving a zero value for a bark map size. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=168473 - http://www.ubuntu.com/usn/USN-1790-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=2c16bf2de07c68513072bf3cc96401d2c6291a3e - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - http://git.chromium.org/gitweb/?p=chromium/deps/ffmpeg.git%3Ba=commit%3Bh=e1e70d9bb9852b7d099379afc95531a632a20ba5
CVE ID: CVE-2013-0895 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:47.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - https://code.google.com/p/chromium/issues/detail?id=167840
CVE ID: CVE-2013-0896 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:48.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - https://oval.cisecurity.org/reposi
l-update_21.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16656 - https://code.google.com/p/chromium/issues/detail?id=166708
CVE ID: CVE-2013-0897 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:48.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=165537 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16153 - http://lists.op
=165537 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16153 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
CVE ID: CVE-2013-0898 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=164643 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - https://o
le.com/p/chromium/issues/detail?id=164643 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16569
CVE ID: CVE-2013-0899 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:48.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=160480 - http://googlechromereleases.blogspot.com/2013/02/stable-chann
tps://code.google.com/p/chromium/issues/detail?id=160480 - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://src.chromium.org/viewvc/chrome/trunk/deps/third_party/opus/src/opus_decoder.c?r1=173498&r2=173497&pathrev=173498 - https://src.chromium.org/viewvc/chrome?view=rev&revision=173498 - https://codereview.chromium.org/11575026 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16027 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - http://opus-codec.org/downloads/
CVE ID: CVE-2013-0900 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T14:41:48.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=152442 - https://oval.cisecurity.org/reposi
channel-update_21.html - https://code.google.com/p/chromium/issues/detail?id=152442 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404 - http://www.debian.org/security/2013/dsa-2786 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html - http://jvn.jp/en/jp/JVN70739377/index.html
CVE ID: CVE-2013-0902 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://code.google.com/p/chromium/issues/detail?id=176882 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16439
CVE ID: CVE-2013-0903 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of browser navigation. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=176252 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16661
CVE ID: CVE-2013-0904 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://code.google.com/p/chromium/issues/detail?id=172331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16042 - https://code.google.com/p/ch
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16042 - https://code.google.com/p/chromium/issues/detail?id=172926
CVE ID: CVE-2013-0905 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG animation. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16495 - https://code.google.com/p/chromium/issues/detail?id=168982
CVE ID: CVE-2013-0906 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://code.google.com/p/chromium/issues/detail?id=174895 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16653
CVE ID: CVE-2013-0907 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media threads. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16633 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://code.google.com/p/chromium/issues/detail?id=174150
CVE ID: CVE-2013-0908 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16369 - https://code.google.com/p/chromium/issues/detail?id=174059
CVE ID: CVE-2013-0909 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16132 - https://code.google.com/p/chromium/issues/detail?id=173906
CVE ID: CVE-2013-0910 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16574 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4
efinition/oval%3Aorg.mitre.oval%3Adef%3A16574 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://src.chromium.org/viewvc/chrome?view=rev&revision=180103 - https://codereview.chromium.org/12086077 - https://code.google.com/p/chromium/issues/detail?id=172573
CVE ID: CVE-2013-0911 State: PUBLISHED Published: 2013-03-04T22:00:00 Last Updated: 2024-08-06T14:41:48.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=172264 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16377
CVE ID: CVE-2013-0912 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T14:41:48.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/ - http://twitter.com/thezdi/statuses/309460019131346944 - http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html - https://code.google.com/p/chromium/issu
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html - https://code.google.com/p/chromium/issues/detail?id=180763 - http://support.apple.com/kb/HT5704 - http://lists.apple.com/archives/security-announce/2013/Apr/msg00000.html - http://support.apple.com/kb/HT5701 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16274 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-0913 State: PUBLISHED Published: 2013-03-18T15:00:00 Last Updated: 2024-08-06T14:41:48.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://
ies, and potentially leads to a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html - https://bugzilla.redhat.com/show_bug.cgi?id=920471 - http://www.ubuntu.com/usn/USN-1812-1 - http://openwall.com/lists/oss-security/2013/03/11/6 - http://www.ubuntu.com/usn/USN-1809-1 - http://openwall.com/lists/oss-security/2013/03/14/22 - http://www.ubuntu.com/usn/USN-1814-1 - http://openwall.com/lists/oss-security/2013/03/13/9 - https://gerrit.chromium.org/gerrit/45118 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-o
hat.com/errata/RHSA-2013-0744.html - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html - http://www.ubuntu.com/usn/USN-1813-1 - https://lkml.org/lkml/2013/3/11/501 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://git.chromium.org/gitweb/?p=chromiumos/third_party/kernel.git%3Ba=commit%3Bh=c79efdf2b7f68f985922a8272d64269ecd490477 - http://www.ubuntu.com/usn/USN-1811-1 - https://code.google.com/p/chromium-os/issues/detail?id=39733
CVE ID: CVE-2013-0914 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T14:41:48.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1796-1 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - https://github.com/torvalds/linux/commit/2ca39528c01a
ts.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1797-1 - http://www.ubuntu.com/usn/USN-1788-1 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://www.ubuntu.com/usn/USN-1793-1 - https://bugzilla.redhat.com/show_bug.cgi?id=920499 - http://www.ubuntu.com/usn/USN-1792-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1794-1 - http://www.ubuntu.com/usn/USN-1795-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3B
- http://www.ubuntu.com/usn/USN-1795-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ca39528c01a933f6689cd6505ce65bd6d68a530 - http://www.openwall.com/lists/oss-security/2013/03/11/8 - http://www.ubuntu.com/usn/USN-1787-1 - http://www.ubuntu.com/usn/USN-1798-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4
CVE ID: CVE-2013-0915 State: PUBLISHED Published: 2013-03-18T15:00:00Z Last Updated: 2024-09-17T02:01:19.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html - https://code.google.com/p/chromium/issues/detail?id=181083
CVE ID: CVE-2013-0916 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://code.google.com/p/chromium/issues/detail?id=172342 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16665
CVE ID: CVE-2013-0917 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15892 - https://code.google.com/p/chromium/issues/detail?id=180909
CVE ID: CVE-2013-0918 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://code.google.com/p/chromium/issues/detail?id=180555 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16520
CVE ID: CVE-2013-0919 State: PUBLISHED Published: 2013-03-28T10:00:00Z Last Updated: 2024-09-16T23:40:52.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=178760 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
CVE ID: CVE-2013-0920 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16552 - https://code.google.com/p/chromium/issues/detail?id=177410
CVE ID: CVE-2013-0921 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://code.google.com/p/chromium/issues/detail?id=174943
CVE ID: CVE-2013-0922 State: PUBLISHED Published: 2013-03-28T10:00:00 Last Updated: 2024-08-06T14:41:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=174129 - http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16215