Strix
26.1K

CVE-2013-2914

UnknownEPSS 1.24%

Last modified

CVE-2013-2914 is a vulnerability of currently unknown severity. Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.. EPSS estimates a 1.24% chance of exploitation in the next 30 days.

Description

Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.

Metrics

EPSS Probability
1.24%

65.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
GoogleChrome<= 30.0.1599.65
GoogleChrome30.0.1599.0
GoogleChrome30.0.1599.1
GoogleChrome30.0.1599.2
GoogleChrome30.0.1599.4
GoogleChrome30.0.1599.5
GoogleChrome30.0.1599.6
GoogleChrome30.0.1599.7
GoogleChrome30.0.1599.8
GoogleChrome30.0.1599.9
GoogleChrome30.0.1599.10
GoogleChrome30.0.1599.11
GoogleChrome30.0.1599.12
GoogleChrome30.0.1599.13
GoogleChrome30.0.1599.14
GoogleChrome30.0.1599.15
GoogleChrome30.0.1599.16
GoogleChrome30.0.1599.17
GoogleChrome30.0.1599.18
GoogleChrome30.0.1599.19
GoogleChrome30.0.1599.20
GoogleChrome30.0.1599.21
GoogleChrome30.0.1599.22
GoogleChrome30.0.1599.23
GoogleChrome30.0.1599.24
GoogleChrome30.0.1599.25
GoogleChrome30.0.1599.26
GoogleChrome30.0.1599.27
GoogleChrome30.0.1599.28
GoogleChrome30.0.1599.29
GoogleChrome30.0.1599.30
GoogleChrome30.0.1599.31
GoogleChrome30.0.1599.32
GoogleChrome30.0.1599.33
GoogleChrome30.0.1599.34
GoogleChrome30.0.1599.35
GoogleChrome30.0.1599.36
GoogleChrome30.0.1599.37
GoogleChrome30.0.1599.38
GoogleChrome30.0.1599.39
GoogleChrome30.0.1599.40
GoogleChrome30.0.1599.41
GoogleChrome30.0.1599.42
GoogleChrome30.0.1599.43
GoogleChrome30.0.1599.44
GoogleChrome30.0.1599.47
GoogleChrome30.0.1599.48
GoogleChrome30.0.1599.49
GoogleChrome30.0.1599.50
GoogleChrome30.0.1599.51

Showing 50 of 59 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-2914?
Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.
How severe is CVE-2013-2914?
Severity scoring for CVE-2013-2914 is pending analysis. The EPSS model estimates a 1.24% probability of exploitation in the next 30 days.
How do I fix CVE-2013-2914?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-2914?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST