Google Chrome CVE-2013-0839 Use-After-Free Memory Corruption Vulnerability

Bugtraq ID:	59683
Class:	Design Error
CVE:	CVE-2013-0839
Remote:	Yes
Local:	No
Published:	Jan 22 2013 12:00AM
Updated:	Sep 26 2013 12:16AM
Credit:	Atte Kettunen of OUSPG
Vulnerable:	Google Chrome 19.0.1084.52 Google Chrome 19 Google Chrome 18.0.1025.168 Google Chrome 18.0.1025.162 Google Chrome 18.0.1025.151 Google Chrome 18.0.1025.142 Gentoo Linux
Not Vulnerable:

Google Chrome CVE-2013-0839 Use-After-Free Memory Corruption Vulnerability

Google Chrome is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Note: This issue was previously discussed in BID 57502 (Google Chrome Prior to 24.0.1312.56 Multiple Security Vulnerabilities), but has been moved to its own record to better document it.

Versions prior to Chrome 24.0.1312.56 are vulnerable.

Google Chrome CVE-2013-0839 Use-After-Free Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome CVE-2013-0839 Use-After-Free Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Chrome CVE-2013-0839 Use-After-Free Memory Corruption Vulnerability

References:

• Google Chrome Homepage (Google)