CVE-2013-2902

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
googlechrome
𝑥
≤ 29.0.1547.56
googlechrome
29.0.1547.0
googlechrome
29.0.1547.1
googlechrome
29.0.1547.2
googlechrome
29.0.1547.3
googlechrome
29.0.1547.4
googlechrome
29.0.1547.5
googlechrome
29.0.1547.7
googlechrome
29.0.1547.8
googlechrome
29.0.1547.9
googlechrome
29.0.1547.10
googlechrome
29.0.1547.11
googlechrome
29.0.1547.12
googlechrome
29.0.1547.13
googlechrome
29.0.1547.14
googlechrome
29.0.1547.15
googlechrome
29.0.1547.16
googlechrome
29.0.1547.17
googlechrome
29.0.1547.18
googlechrome
29.0.1547.19
googlechrome
29.0.1547.20
googlechrome
29.0.1547.21
googlechrome
29.0.1547.22
googlechrome
29.0.1547.23
googlechrome
29.0.1547.27
googlechrome
29.0.1547.28
googlechrome
29.0.1547.29
googlechrome
29.0.1547.30
googlechrome
29.0.1547.31
googlechrome
29.0.1547.32
googlechrome
29.0.1547.33
googlechrome
29.0.1547.34
googlechrome
29.0.1547.35
googlechrome
29.0.1547.36
googlechrome
29.0.1547.37
googlechrome
29.0.1547.38
googlechrome
29.0.1547.39
googlechrome
29.0.1547.40
googlechrome
29.0.1547.41
googlechrome
29.0.1547.42
googlechrome
29.0.1547.45
googlechrome
29.0.1547.46
googlechrome
29.0.1547.47
googlechrome
29.0.1547.48
googlechrome
29.0.1547.49
googlechrome
29.0.1547.50
googlechrome
29.0.1547.51
googlechrome
29.0.1547.52
googlechrome
29.0.1547.53
googlechrome
29.0.1547.54
googlechrome
29.0.1547.55
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxslt
bullseye (security)
1.1.34-4+deb11u1
fixed
bullseye
1.1.34-4+deb11u1
fixed
bookworm
1.1.35-1
fixed
sid
1.1.35-1.1
fixed
trixie
1.1.35-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
saucy
not-affected
raring
Fixed 30.0.1599.114-0ubuntu0.13.04.2
released
quantal
Fixed 30.0.1599.114-0ubuntu0.12.10.2
released
precise
Fixed 30.0.1599.114-0ubuntu0.12.04.3
released
lucid
ignored
libxslt
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
not-affected
Common Weakness Enumeration