deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4206
Published: 2013-08-19
Description: Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html; http://secunia.com/advisories/54379; http://secunia.com/advisories/54533
CVE: CVE-2013-4207
Published: 2013-08-19
Description: Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html; http://secunia.com/advisories/54379; http://secunia.com/advisories/54533
CVE: CVE-2013-4208
Published: 2013-08-19
Description: The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html; http://secunia.com/advisories/54379; http://secunia.com/advisories/54533
CVE: CVE-2013-4236
Published: 2013-08-19
Description: VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response.  NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
CVSS Score: 2.7 (LOW)
References: http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6; http://rhn.redhat.com/errata/RHSA-2013-1155.html; https://bugzilla.redhat.com/show_bug.cgi?id=996166
CVE: CVE-2013-4242
Published: 2013-08-19
Description: GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880; http://eprint.iacr.org/2013/448; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
CVE: CVE-2013-4852
Published: 2013-08-19
Description: Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718779; http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00041.html
CVE: CVE-2013-5029
Published: 2013-08-19
Description: phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00013.html; http://secunia.com/advisories/54488; http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.php
CVE: CVE-2013-5315
Published: 2013-08-19
Description: Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than CVE-2013-4174.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://drupalcode.org/project/scald.git/blobdiff/9ce68f67a25200afa5256f567ef89bc4b9fd705e..974a5e29f502a58e6a955d69a85bb5f16c1c8b3e:/mee/mee.module; http://drupalcode.org/project/scald.git/commitdiff/32db1ee; http://osvdb.org/95625
CVE: CVE-2013-4653
Published: 2013-08-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System (AMDS) before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and OmniTouch 8400 Instant Communications Suite before 6.7.3 (1) allow remote attackers to inject arbitrary web script or HTML via a crafted URL that results in a reflected XSS or (2) allow user-assisted remote attackers to inject arbitrary web script or HTML via a user's personal bookmark entry that results in a stored XSS via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/94810; http://osvdb.org/94811; http://secunia.com/advisories/54000
CVE: CVE-2013-5316
Published: 2013-08-20
Description: Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://www.exploit-db.com/exploits/27315; http://www.securityfocus.com/bid/61587
CVE: CVE-2013-5317
Published: 2013-08-20
Description: Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://www.exploit-db.com/exploits/27315; http://www.securityfocus.com/bid/61587
CVE: CVE-2013-5318
Published: 2013-08-20
Description: SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/54485; http://www.exploit-db.com/exploits/27274; https://exchange.xforce.ibmcloud.com/vulnerabilities/86395
CVE: CVE-2013-5319
Published: 2013-08-20
Description: Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cxsecurity.com/issue/WLB[PII_REDACTED]; http://packetstormsecurity.com/files/122721; http://secunia.com/advisories/54417
CVE: CVE-2013-5320
Published: 2013-08-20
Description: Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0200.html; http://osvdb.org/95847; http://packetstormsecurity.com/files/122608/MojoPortal-2.3.9.7-Cross-Site-Scripting.html
CVE: CVE-2013-5321
Published: 2013-08-20
Description: Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/26406; http://www.exploit-db.com/exploits/26406
CVE: CVE-2012-6582
Published: 2013-08-20
Description: Cross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://osvdb.org/85680; http://secunia.com/advisories/50670; http://www.securityfocus.com/bid/55613
CVE: CVE-2013-5322
Published: 2013-08-20
Description: SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/90415; http://secunia.com/advisories/52282; http://typo3.org/extensions/repository/view/cooluri
CVE: CVE-2013-5323
Published: 2013-08-20
Description: Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/90414; http://secunia.com/advisories/52283; http://typo3.org/extensions/repository/view/static_info_tables
CVE: CVE-2013-2153
Published: 2013-08-20
Description: The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypass issue."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0140.html; http://santuario.apache.org/secadv.data/CVE-2013-2153.txt; http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp?r1=1125514&r2=1493959&pathrev=1493959&diff_format=h
CVE: CVE-2013-2154
Published: 2013-08-20
Description: Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions, probably related to the DSIGReference::getURIBaseTXFM function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0141.html; http://santuario.apache.org/secadv.data/CVE-2013-2154.txt; http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp?r1=1125514&r2=1493959&pathrev=1493959&diff_format=h
CVE: CVE-2013-2155
Published: 2013-08-20
Description: Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the (1) compareBase64StringToRaw, (2) DSIGAlgorithmHandlerDefault, or (3) DSIGAlgorithmHandlerDefault::verify functions.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0142.html; http://santuario.apache.org/secadv.data/CVE-2013-2155.txt; http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGAlgorithmHandlerDefault.cpp?r1=1125752&r2=1493960&pathrev=1493960&diff_format=h
CVE: CVE-2013-2156
Published: 2013-08-20
Description: Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PrefixList attribute.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0143.html; http://santuario.apache.org/secadv.data/CVE-2013-2156.txt; http://svn.apache.org/viewvc?view=revision&revision=1493961
CVE: CVE-2013-2157
Published: 2013-08-20
Description: OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2013-0994.html; http://rhn.redhat.com/errata/RHSA-2013-1083.html; http://www.openwall.com/lists/oss-security/2013/06/13/3
CVE: CVE-2013-2161
Published: 2013-08-20
Description: XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-updates/2013-07/msg00021.html; http://rhn.redhat.com/errata/RHSA-2013-0993.html; http://www.debian.org/security/2012/dsa-2737
CVE: CVE-2013-2172
Published: 2013-08-20
Description: jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2013-1207.html; http://rhn.redhat.com/errata/RHSA-2013-1208.html; http://rhn.redhat.com/errata/RHSA-2013-1209.html
CVE: CVE-2013-2210
Published: 2013-08-20
Description: Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions.  NOTE: this is due to an incorrect fix for CVE-2013-2154.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0216.html; http://santuario.apache.org/secadv.data/CVE-2013-2210.txt; http://www.debian.org/security/2013/dsa-2717
CVE: CVE-2013-4130
Published: 2013-08-20
Description: The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://cgit.freedesktop.org/spice/spice/commit/?id=53488f0275d6c8a121af49f7ac817d09ce68090d; http://rhn.redhat.com/errata/RHSA-2013-1260.html; http://seclists.org/oss-sec/2013/q3/115
CVE: CVE-2013-4155
Published: 2013-08-20
Description: OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2013-1197.html; http://www.debian.org/security/2012/dsa-2737; http://www.openwall.com/lists/oss-security/2013/08/07/6
CVE: CVE-2013-4761
Published: 2013-08-20
Description: Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service.  NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00009.html; http://puppetlabs.com/security/cve/cve-2013-4761/; http://rhn.redhat.com/errata/RHSA-2013-1283.html
CVE: CVE-2013-4762
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by obtaining an old session ID.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://puppetlabs.com/security/cve/cve-2013-4762/; http://puppetlabs.com/security/cve/cve-2013-4762/
CVE: CVE-2013-4955
Published: 2013-08-20
Description: Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://puppetlabs.com/security/cve/cve-2013-4955/; http://puppetlabs.com/security/cve/cve-2013-4955/
CVE: CVE-2013-4956
Published: 2013-08-20
Description: Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://puppetlabs.com/security/cve/cve-2013-4956/; http://rhn.redhat.com/errata/RHSA-2013-1283.html; http://rhn.redhat.com/errata/RHSA-2013-1284.html
CVE: CVE-2013-4958
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers to gain privileges by leveraging an unattended workstation.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-287
References: http://puppetlabs.com/security/cve/cve-2013-4958/; http://puppetlabs.com/security/cve/cve-2013-4958/
CVE: CVE-2013-4959
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://puppetlabs.com/security/cve/cve-2013-4959/; http://puppetlabs.com/security/cve/cve-2013-4959/
CVE: CVE-2013-4961
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://puppetlabs.com/security/cve/cve-2013-4961/; http://puppetlabs.com/security/cve/cve-2013-4961/
CVE: CVE-2013-4962
Published: 2013-08-20
Description: The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-255
References: http://puppetlabs.com/security/cve/cve-2013-4962/; http://puppetlabs.com/security/cve/cve-2013-4962/
CVE: CVE-2013-4964
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://puppetlabs.com/security/cve/cve-2013-4964/; http://puppetlabs.com/security/cve/cve-2013-4964/
CVE: CVE-2013-4967
Published: 2013-08-20
Description: Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://puppetlabs.com/security/cve/cve-2013-4967; http://puppetlabs.com/security/cve/cve-2013-4967
CVE: CVE-2013-2887
Published: 2013-08-21
Description: Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://crbug.com/116128; http://crbug.com/166916; http://crbug.com/172119
CVE: CVE-2013-2900
Published: 2013-08-21
Description: The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://crbug.com/181617; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2741
CVE: CVE-2013-2901
Published: 2013-08-21
Description: Multiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine (ANGLE), as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://code.google.com/p/angleproject/issues/detail?id=444; http://crbug.com/257363; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html
CVE: CVE-2013-2902
Published: 2013-08-21
Description: Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://crbug.com/260105; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2741
CVE: CVE-2013-2903
Published: 2013-08-21
Description: Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving a (1) AUDIO or (2) VIDEO element between documents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://crbug.com/260156; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2741
CVE: CVE-2013-2904
Published: 2013-08-21
Description: Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://crbug.com/260428; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2741
CVE: CVE-2013-2905
Published: 2013-08-21
Description: The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://crbug.com/254159; http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2741