Strix
26.1K

CVE-2013-2846

UnknownEPSS 1.08%

Last modified

CVE-2013-2846 is a vulnerability of currently unknown severity. Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.. EPSS estimates a 1.08% chance of exploitation in the next 30 days.

Description

Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.

Metrics

EPSS Probability
1.08%

60.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
GoogleChrome<= 27.0.1453.91
GoogleChrome27.0.1453.0
GoogleChrome27.0.1453.1
GoogleChrome27.0.1453.2
GoogleChrome27.0.1453.3
GoogleChrome27.0.1453.4
GoogleChrome27.0.1453.5
GoogleChrome27.0.1453.6
GoogleChrome27.0.1453.7
GoogleChrome27.0.1453.8
GoogleChrome27.0.1453.9
GoogleChrome27.0.1453.10
GoogleChrome27.0.1453.11
GoogleChrome27.0.1453.12
GoogleChrome27.0.1453.13
GoogleChrome27.0.1453.15
GoogleChrome27.0.1453.34
GoogleChrome27.0.1453.35
GoogleChrome27.0.1453.36
GoogleChrome27.0.1453.37
GoogleChrome27.0.1453.38
GoogleChrome27.0.1453.39
GoogleChrome27.0.1453.40
GoogleChrome27.0.1453.41
GoogleChrome27.0.1453.42
GoogleChrome27.0.1453.43
GoogleChrome27.0.1453.44
GoogleChrome27.0.1453.45
GoogleChrome27.0.1453.46
GoogleChrome27.0.1453.47
GoogleChrome27.0.1453.49
GoogleChrome27.0.1453.50
GoogleChrome27.0.1453.51
GoogleChrome27.0.1453.52
GoogleChrome27.0.1453.54
GoogleChrome27.0.1453.55
GoogleChrome27.0.1453.56
GoogleChrome27.0.1453.57
GoogleChrome27.0.1453.58
GoogleChrome27.0.1453.59
GoogleChrome27.0.1453.60
GoogleChrome27.0.1453.61
GoogleChrome27.0.1453.62
GoogleChrome27.0.1453.63
GoogleChrome27.0.1453.64
GoogleChrome27.0.1453.65
GoogleChrome27.0.1453.66
GoogleChrome27.0.1453.67
GoogleChrome27.0.1453.68
GoogleChrome27.0.1453.69

Showing 50 of 71 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-2846?
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.
How severe is CVE-2013-2846?
Severity scoring for CVE-2013-2846 is pending analysis. The EPSS model estimates a 1.08% probability of exploitation in the next 30 days.
How do I fix CVE-2013-2846?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2013

View all 2013CVEs →

Are you affected by CVE-2013-2846?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST