Deskripsi CVE

Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Google>>Chrome >> Version Hingga (termasuk) 30.0.1599.100

Google>>Chrome >> Version 30.0.1599.0

Google>>Chrome >> Version 30.0.1599.1

Google>>Chrome >> Version 30.0.1599.2

Google>>Chrome >> Version 30.0.1599.4

Google>>Chrome >> Version 30.0.1599.5

Google>>Chrome >> Version 30.0.1599.6

Google>>Chrome >> Version 30.0.1599.7

Google>>Chrome >> Version 30.0.1599.8

Google>>Chrome >> Version 30.0.1599.9

Google>>Chrome >> Version 30.0.1599.10

Google>>Chrome >> Version 30.0.1599.11

Google>>Chrome >> Version 30.0.1599.12

Google>>Chrome >> Version 30.0.1599.13

Google>>Chrome >> Version 30.0.1599.14

Google>>Chrome >> Version 30.0.1599.15

Google>>Chrome >> Version 30.0.1599.16

Google>>Chrome >> Version 30.0.1599.17

Google>>Chrome >> Version 30.0.1599.18

Google>>Chrome >> Version 30.0.1599.19

Google>>Chrome >> Version 30.0.1599.20

Google>>Chrome >> Version 30.0.1599.21

Google>>Chrome >> Version 30.0.1599.22

Google>>Chrome >> Version 30.0.1599.23

Google>>Chrome >> Version 30.0.1599.24

Google>>Chrome >> Version 30.0.1599.25

Google>>Chrome >> Version 30.0.1599.26

Google>>Chrome >> Version 30.0.1599.27

Google>>Chrome >> Version 30.0.1599.28

Google>>Chrome >> Version 30.0.1599.29

Google>>Chrome >> Version 30.0.1599.30

Google>>Chrome >> Version 30.0.1599.31

Google>>Chrome >> Version 30.0.1599.32

Google>>Chrome >> Version 30.0.1599.33

Google>>Chrome >> Version 30.0.1599.34

Google>>Chrome >> Version 30.0.1599.35

Google>>Chrome >> Version 30.0.1599.36

Google>>Chrome >> Version 30.0.1599.37

Google>>Chrome >> Version 30.0.1599.38

Google>>Chrome >> Version 30.0.1599.39

Google>>Chrome >> Version 30.0.1599.40

Google>>Chrome >> Version 30.0.1599.41

Google>>Chrome >> Version 30.0.1599.42

Google>>Chrome >> Version 30.0.1599.43

Google>>Chrome >> Version 30.0.1599.44

Google>>Chrome >> Version 30.0.1599.47

Google>>Chrome >> Version 30.0.1599.48

Google>>Chrome >> Version 30.0.1599.49

Google>>Chrome >> Version 30.0.1599.50

Google>>Chrome >> Version 30.0.1599.51

Google>>Chrome >> Version 30.0.1599.52

Google>>Chrome >> Version 30.0.1599.53

Google>>Chrome >> Version 30.0.1599.56

Google>>Chrome >> Version 30.0.1599.57

Google>>Chrome >> Version 30.0.1599.58

Google>>Chrome >> Version 30.0.1599.59

Google>>Chrome >> Version 30.0.1599.60

Google>>Chrome >> Version 30.0.1599.61

Google>>Chrome >> Version 30.0.1599.64

Google>>Chrome >> Version 30.0.1599.65

Google>>Chrome >> Version 30.0.1599.66

Google>>Chrome >> Version 30.0.1599.67

Google>>Chrome >> Version 30.0.1599.68

Google>>Chrome >> Version 30.0.1599.69

Google>>Chrome >> Version 30.0.1599.79

Google>>Chrome >> Version 30.0.1599.80

Google>>Chrome >> Version 30.0.1599.81

Google>>Chrome >> Version 30.0.1599.82

Google>>Chrome >> Version 30.0.1599.84

Google>>Chrome >> Version 30.0.1599.85

Google>>Chrome >> Version 30.0.1599.86

Google>>Chrome >> Version 30.0.1599.87

Google>>Chrome >> Version 30.0.1599.88

Google>>Chrome >> Version 30.0.1599.90

Referensi

https://code.google.com/p/chromium/issues/detail?id=292422
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.debian.org/security/2013/dsa-2785
Tags : vendor-advisory, x_refsource_DEBIAN

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
Tags : vendor-advisory, x_refsource_SUSE

https://src.chromium.org/viewvc/blink?revision=158146&view=revision
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html
Tags : vendor-advisory, x_refsource_SUSE

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18866
Tags : vdb-entry, signature, x_refsource_OVAL

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
Tags : x_refsource_CONFIRM

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.78%	–	–
2022-03-06	–	–	1.78%	–	–
2022-04-03	–	–	1.78%	–	–
2022-07-17	–	–	1.78%	–	–
2023-02-26	–	–	1.78%	–	–
2023-03-12	–	–	–	2.15%	–
2023-03-19	–	–	–	2.15%	–
2023-06-04	–	–	–	2.05%	–
2023-08-06	–	–	–	2.05%	–
2024-02-11	–	–	–	2.05%	–
2024-06-02	–	–	–	2.05%	–
2025-01-19	–	–	–	2.05%	–
2025-03-18	–	–	–	–	1.61%
2025-03-30	–	–	–	–	1.61%
2025-04-15	–	–	–	–	1.61%
2025-11-18	–	–	–	–	1.61%
2025-11-21	–	–	–	–	1.61%
2026-03-01	–	–	–	–	1.61%
2026-03-06	–	–	–	–	1.61%

Tanggal	Persentil
2022-02-06	54%
2022-03-06	55%
2022-04-03	75%
2022-07-17	76%
2023-02-26	77%
2023-03-12	87%
2023-03-19	88%
2023-06-04	87%
2023-08-06	88%
2024-02-11	89%
2024-06-02	89%
2025-01-19	89%
2025-03-18	81%
2025-03-30	8%
2025-04-15	81%
2025-11-18	8%
2025-11-21	81%
2026-03-01	82%
2026-03-06	82%

CVE-2013-2925 : Detail

CVE-2013-2925