Deskripsi CVE

Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Google>>Chrome >> Version Hingga (termasuk) 30.0.1599.65

Google>>Chrome >> Version 30.0.1599.0

Google>>Chrome >> Version 30.0.1599.1

Google>>Chrome >> Version 30.0.1599.2

Google>>Chrome >> Version 30.0.1599.4

Google>>Chrome >> Version 30.0.1599.5

Google>>Chrome >> Version 30.0.1599.6

Google>>Chrome >> Version 30.0.1599.7

Google>>Chrome >> Version 30.0.1599.8

Google>>Chrome >> Version 30.0.1599.9

Google>>Chrome >> Version 30.0.1599.10

Google>>Chrome >> Version 30.0.1599.11

Google>>Chrome >> Version 30.0.1599.12

Google>>Chrome >> Version 30.0.1599.13

Google>>Chrome >> Version 30.0.1599.14

Google>>Chrome >> Version 30.0.1599.15

Google>>Chrome >> Version 30.0.1599.16

Google>>Chrome >> Version 30.0.1599.17

Google>>Chrome >> Version 30.0.1599.18

Google>>Chrome >> Version 30.0.1599.19

Google>>Chrome >> Version 30.0.1599.20

Google>>Chrome >> Version 30.0.1599.21

Google>>Chrome >> Version 30.0.1599.22

Google>>Chrome >> Version 30.0.1599.23

Google>>Chrome >> Version 30.0.1599.24

Google>>Chrome >> Version 30.0.1599.25

Google>>Chrome >> Version 30.0.1599.26

Google>>Chrome >> Version 30.0.1599.27

Google>>Chrome >> Version 30.0.1599.28

Google>>Chrome >> Version 30.0.1599.29

Google>>Chrome >> Version 30.0.1599.30

Google>>Chrome >> Version 30.0.1599.31

Google>>Chrome >> Version 30.0.1599.32

Google>>Chrome >> Version 30.0.1599.33

Google>>Chrome >> Version 30.0.1599.34

Google>>Chrome >> Version 30.0.1599.35

Google>>Chrome >> Version 30.0.1599.36

Google>>Chrome >> Version 30.0.1599.37

Google>>Chrome >> Version 30.0.1599.38

Google>>Chrome >> Version 30.0.1599.39

Google>>Chrome >> Version 30.0.1599.40

Google>>Chrome >> Version 30.0.1599.41

Google>>Chrome >> Version 30.0.1599.42

Google>>Chrome >> Version 30.0.1599.43

Google>>Chrome >> Version 30.0.1599.44

Google>>Chrome >> Version 30.0.1599.47

Google>>Chrome >> Version 30.0.1599.48

Google>>Chrome >> Version 30.0.1599.49

Google>>Chrome >> Version 30.0.1599.50

Google>>Chrome >> Version 30.0.1599.51

Google>>Chrome >> Version 30.0.1599.52

Google>>Chrome >> Version 30.0.1599.53

Google>>Chrome >> Version 30.0.1599.56

Google>>Chrome >> Version 30.0.1599.57

Google>>Chrome >> Version 30.0.1599.58

Google>>Chrome >> Version 30.0.1599.59

Google>>Chrome >> Version 30.0.1599.60

Google>>Chrome >> Version 30.0.1599.61

Google>>Chrome >> Version 30.0.1599.64

Microsoft>>Windows >> Version *

Referensi

http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html
Tags : x_refsource_CONFIRM

https://src.chromium.org/viewvc/chrome?revision=220639&view=revision
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

https://code.google.com/p/chromium/issues/detail?id=279263
Tags : x_refsource_CONFIRM

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18081
Tags : vdb-entry, signature, x_refsource_OVAL

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.32%	–	–
2022-02-27	–	–	1.32%	–	–
2022-04-03	–	–	1.32%	–	–
2022-05-15	–	–	1.32%	–	–
2022-09-18	–	–	1.32%	–	–
2023-03-12	–	–	–	1.11%	–
2023-05-21	–	–	–	1.06%	–
2023-11-05	–	–	–	1.06%	–
2023-11-12	–	–	–	1.06%	–
2024-01-28	–	–	–	1.06%	–
2024-02-11	–	–	–	1.06%	–
2024-06-02	–	–	–	1.27%	–
2024-12-22	–	–	–	1.27%	–
2025-01-19	–	–	–	1.27%	–
2025-01-19	–	–	–	1.27%	–
2025-03-18	–	–	–	–	1.09%
2025-04-15	–	–	–	–	1.09%
2025-10-01	–	–	–	–	0.84%
2025-10-14	–	–	–	–	1.09%
2025-10-16	–	–	–	–	0.84%
2025-10-17	–	–	–	–	1.09%
2025-10-19	–	–	–	–	0.84%
2025-10-20	–	–	–	–	1.09%
2025-10-21	–	–	–	–	0.84%
2025-10-22	–	–	–	–	1.09%
2025-10-24	–	–	–	–	0.84%
2025-10-27	–	–	–	–	1.09%
2025-10-28	–	–	–	–	0.84%
2025-10-29	–	–	–	–	1.09%
2025-10-31	–	–	–	–	0.84%
2025-11-01	–	–	–	–	1.09%
2025-11-03	–	–	–	–	0.84%
2025-11-18	–	–	–	–	0.84%
2025-11-21	–	–	–	–	0.84%
2025-12-13	–	–	–	–	1.09%
2025-12-16	–	–	–	–	0.84%
2025-12-22	–	–	–	–	1.09%
2025-12-23	–	–	–	–	0.84%
2025-12-25	–	–	–	–	1.09%
2026-01-01	–	–	–	–	0.84%
2026-03-29	–	–	–	–	0.84%
2026-05-17	–	–	–	–	1.09%

Tanggal	Persentil
2022-02-06	45%
2022-02-27	46%
2022-04-03	69%
2022-05-15	7%
2022-09-18	71%
2023-03-12	82%
2023-05-21	82%
2023-11-05	83%
2023-11-12	82%
2024-01-28	83%
2024-02-11	84%
2024-06-02	86%
2024-12-22	85%
2025-01-19	86%
2025-01-19	86%
2025-03-18	76%
2025-04-15	77%
2025-10-01	74%
2025-10-14	77%
2025-10-16	74%
2025-10-17	77%
2025-10-19	74%
2025-10-20	77%
2025-10-21	74%
2025-10-22	77%
2025-10-24	74%
2025-10-27	77%
2025-10-28	74%
2025-10-29	77%
2025-10-31	74%
2025-11-01	77%
2025-11-03	74%
2025-11-18	73%
2025-11-21	74%
2025-12-13	77%
2025-12-16	74%
2025-12-22	77%
2025-12-23	74%
2025-12-25	77%
2026-01-01	74%
2026-03-29	75%
2026-05-17	78%

CVE-2013-2914 : Detail

CVE-2013-2914