CVE-2013-6802

Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
VendorProductVersion
googlechrome
𝑥
≤ 31.0.1650.57
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
saucy
Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
released
raring
Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
released
quantal
Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
released
precise
Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
released
lucid
ignored
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
https://code.google.com/p/chromium/issues/detail?id=319117
https://code.google.com/p/chromium/issues/detail?id=319125
https://exchange.xforce.ibmcloud.com/vulnerabilities/89201
http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
https://code.google.com/p/chromium/issues/detail?id=319117
https://code.google.com/p/chromium/issues/detail?id=319125
https://exchange.xforce.ibmcloud.com/vulnerabilities/89201