CVE-2013-6802

EUVD-2013-6604
Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 31.0.1650.57
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
released
quantal
Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
released
raring
Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
released
saucy
Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
released
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
https://code.google.com/p/chromium/issues/detail?id=319117
https://code.google.com/p/chromium/issues/detail?id=319125
https://exchange.xforce.ibmcloud.com/vulnerabilities/89201
http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
https://code.google.com/p/chromium/issues/detail?id=319117
https://code.google.com/p/chromium/issues/detail?id=319125
https://exchange.xforce.ibmcloud.com/vulnerabilities/89201