CVE-2013-0904
UnknownEPSS 1.05%
Last modified
CVE-2013-0904 is a vulnerability of currently unknown severity. The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Chrome | <= 25.0.1364.126 | |
| Chrome | 25.0.1364.0 | |
| Chrome | 25.0.1364.1 | |
| Chrome | 25.0.1364.2 | |
| Chrome | 25.0.1364.3 | |
| Chrome | 25.0.1364.5 | |
| Chrome | 25.0.1364.7 | |
| Chrome | 25.0.1364.8 | |
| Chrome | 25.0.1364.9 | |
| Chrome | 25.0.1364.10 | |
| Chrome | 25.0.1364.11 | |
| Chrome | 25.0.1364.12 | |
| Chrome | 25.0.1364.13 | |
| Chrome | 25.0.1364.14 | |
| Chrome | 25.0.1364.15 | |
| Chrome | 25.0.1364.16 | |
| Chrome | 25.0.1364.17 | |
| Chrome | 25.0.1364.18 | |
| Chrome | 25.0.1364.19 | |
| Chrome | 25.0.1364.20 | |
| Chrome | 25.0.1364.21 | |
| Chrome | 25.0.1364.22 | |
| Chrome | 25.0.1364.23 | |
| Chrome | 25.0.1364.24 | |
| Chrome | 25.0.1364.25 | |
| Chrome | 25.0.1364.26 | |
| Chrome | 25.0.1364.27 | |
| Chrome | 25.0.1364.28 | |
| Chrome | 25.0.1364.29 | |
| Chrome | 25.0.1364.30 | |
| Chrome | 25.0.1364.31 | |
| Chrome | 25.0.1364.32 | |
| Chrome | 25.0.1364.33 | |
| Chrome | 25.0.1364.34 | |
| Chrome | 25.0.1364.35 | |
| Chrome | 25.0.1364.36 | |
| Chrome | 25.0.1364.37 | |
| Chrome | 25.0.1364.38 | |
| Chrome | 25.0.1364.39 | |
| Chrome | 25.0.1364.40 | |
| Chrome | 25.0.1364.41 | |
| Chrome | 25.0.1364.42 | |
| Chrome | 25.0.1364.43 | |
| Chrome | 25.0.1364.44 | |
| Chrome | 25.0.1364.45 | |
| Chrome | 25.0.1364.46 | |
| Chrome | 25.0.1364.47 | |
| Chrome | 25.0.1364.48 | |
| Chrome | 25.0.1364.49 | |
| Chrome | 25.0.1364.50 |
Showing 50 of 106 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-0904?
The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
How severe is CVE-2013-0904?
Severity scoring for CVE-2013-0904 is pending analysis. The EPSS model estimates a 1.05% probability of exploitation in the next 30 days.
How do I fix CVE-2013-0904?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-0897Off-by-one error in the PDF functionality in Google Chrome b…
- CVE-2013-0898Use-after-free vulnerability in Google Chrome before 25.0.13…
- CVE-2013-0899Integer overflow in the padding implementation in the opus_p…
- CVE-2013-0900Race condition in the International Components for Unicode (…
- CVE-2013-0902Use-after-free vulnerability in the frame-loader implementat…
- CVE-2013-0903Use-after-free vulnerability in Google Chrome before 25.0.13…
- CVE-2013-0905Use-after-free vulnerability in Google Chrome before 25.0.13…
- CVE-2013-0906The IndexedDB implementation in Google Chrome before 25.0.13…
- CVE-2013-0907Race condition in Google Chrome before 25.0.1364.152 allows …
- CVE-2013-0908Google Chrome before 25.0.1364.152 does not properly manage …
- CVE-2013-0909The XSS Auditor in Google Chrome before 25.0.1364.152 allows…
- CVE-2013-0910Google Chrome before 25.0.1364.152 does not properly manage …
Are you affected by CVE-2013-0904?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST