Google Chrome Prior to 30.0.1599.66 Multiple Security Vulnerabilities
BID:62752
Info
Google Chrome Prior to 30.0.1599.66 Multiple Security Vulnerabilities
| Bugtraq ID: | 62752 |
| Class: | Unknown |
| CVE: |
CVE-2013-2906 CVE-2013-2907 CVE-2013-2908 CVE-2013-2910 CVE-2013-2911 CVE-2013-2912 CVE-2013-2913 CVE-2013-2914 CVE-2013-2915 CVE-2013-2916 CVE-2013-2917 CVE-2013-2918 CVE-2013-2919 CVE-2013-2920 CVE-2013-2921 CVE-2013-2922 CVE-2013-2923 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2013 12:00AM |
| Updated: | Mar 19 2015 08:21AM |
| Credit: | Atte Kettunen of OUSPG, Boris Zbarsky,Chamal de Silva and 41.w4r10r(at)garage4hackers.com,cloudfuzzer, Khalil Zhani, Wander Groeneveld, Masato Kinugawa,Adam Haile of Concrete Data,Byoungyoung Lee and Tielei Wang of Georgia Tech Information Security Center |
| Vulnerable: |
S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 Google Chrome 27.0.1444 3 Google Chrome 25.0.1364 160 Google Chrome 16.0.912 75 Google Chrome 15.0.874 102 Google Chrome 3.0.195 .21 Google Chrome 0.3.154 9 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 9 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.308 Google Chrome 8.0.552.307 Google Chrome 8.0.552.306 Google Chrome 8.0.552.305 Google Chrome 8.0.552.304 Google Chrome 8.0.552.303 Google Chrome 8.0.552.302 Google Chrome 8.0.552.301 Google Chrome 8.0.552.300 Google Chrome 8.0.552.237 Google Chrome 8.0.552.226 Google Chrome 8.0.552.225 Google Chrome 8.0.552.224 Google Chrome 8.0.552.223 Google Chrome 8.0.552.222 Google Chrome 8.0.552.221 Google Chrome 8.0.552.220 Google Chrome 8.0.552.219 Google Chrome 8.0.552.218 Google Chrome 8.0.552.217 Google Chrome 8.0.552.216 Google Chrome 8.0.552.215 Google Chrome 8.0.552.214 Google Chrome 8.0.552.213 Google Chrome 8.0.552.212 Google Chrome 8.0.552.211 Google Chrome 8.0.552.210 Google Chrome 8.0.552.21 Google Chrome 8.0.552.209 Google Chrome 8.0.552.208 Google Chrome 8.0.552.207 Google Chrome 8.0.552.206 Google Chrome 8.0.552.205 Google Chrome 8.0.552.204 Google Chrome 8.0.552.203 Google Chrome 8.0.552.202 Google Chrome 8.0.552.201 Google Chrome 8.0.552.200 Google Chrome 8.0.552.20 Google Chrome 8.0.552.2 Google Chrome 8.0.552.19 Google Chrome 8.0.552.18 Google Chrome 8.0.552.17 Google Chrome 8.0.552.16 Google Chrome 8.0.552.15 Google Chrome 8.0.552.14 Google Chrome 8.0.552.13 Google Chrome 8.0.552.12 Google Chrome 8.0.552.11 Google Chrome 8.0.552.105 Google Chrome 8.0.552.104 Google Chrome 8.0.552.103 Google Chrome 8.0.552.102 Google Chrome 8.0.552.101 Google Chrome 8.0.552.100 Google Chrome 8.0.552.10 Google Chrome 8.0.552.1 Google Chrome 8.0.552.0 Google Chrome 8.0.551.1 Google Chrome 8.0.551.0 Google Chrome 8.0.549.0 Google Chrome 7.0.500.0 Google Chrome 7.0.499.1 Google Chrome 7.0.499.0 Google Chrome 7.0.498.0 Google Chrome 7.0.497.0 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Google Chrome 5.0.326.0 Google Chrome 5.0.325.0 Google Chrome 5.0.324.0 Google Chrome 5.0.323.0 Google Chrome 5.0.322.0 Google Chrome 5.0.321.0 Google Chrome 5.0.320.0 Google Chrome 5.0.319.0 Google Chrome 5.0.318.0 Google Chrome 5.0.317.0 Google Chrome 5.0.316.0 Google Chrome 5.0.315.0 Google Chrome 5.0.314.0 Google Chrome 5.0.313.0 Google Chrome 5.0.309.0 Google Chrome 5.0.308.0 Google Chrome 5.0.307.1 Google Chrome 5.0.306.0 Google Chrome 4 Google Chrome 3.0.195.37 Google Chrome 3.0.195.36 Google Chrome 3.0.195.27 Google Chrome 3.0.195.25 Google Chrome 3.0.195.2 Google Chrome 3.0.193.2 Beta Google Chrome 3.0.190.2 Google Chrome 3.0.182.2 Google Chrome 3.0 Beta Google Chrome 3 Google Chrome 27.0.1453.93 Google Chrome 27.0.1453.110 Google Chrome 26.0.1410.64 Google Chrome 26.0.1410.63 Google Chrome 26.0.1410.53 Google Chrome 26.0.1410.46 Google Chrome 26.0.1410.43 Google Chrome 26.0.1410.28 Google Chrome 25.0.1364.99 Google Chrome 25.0.1364.97 Google Chrome 25.0.1364.95 Google Chrome 25.0.1364.172 Google Chrome 25.0.1364.152 Google Chrome 25 Google Chrome 24.0.1312.70 Google Chrome 24.0.1312.57 Google Chrome 24.0.1312.56 Google Chrome 24.0.1312.52 Google Chrome 23.0.1271.97 Google Chrome 23.0.1271.95 Google Chrome 23.0.1271.91 Google Chrome 23.0.1271.64 Google Chrome 22.0.1229.94 Google Chrome 22.0.1229.92 Google Chrome 22.0.1229.79 Google Chrome 22 Google Chrome 21.0.1180.89 Google Chrome 21.0.1180.83 Google Chrome 21.0.1180.82 Google Chrome 21.0.1180.81 Google Chrome 21.0.1180.79 Google Chrome 21.0.1180.75 Google Chrome 21.0.1180.60 Google Chrome 21.0.1180.57 Google Chrome 21.0.1180.50 Google Chrome 21.0.1180.49 Google Chrome 21 Google Chrome 20.0.1132.57 Google Chrome 20.0.1132.43 Google Chrome 20.0.1132.23 Google Chrome 2.0.172.8 Google Chrome 2.0.172.38 Google Chrome 2.0.172.28 Google Chrome 2.0.172.27 Google Chrome 2.0.172.2 Google Chrome 2.0.172 Google Chrome 2.0.170.0 Google Chrome 2.0.169.1 Google Chrome 2.0.169.0 Google Chrome 2.0.159.0 Google Chrome 2.0.158.0 Google Chrome 2.0.157.2 Google Chrome 2.0.157.0 Google Chrome 2.0.156.1 Google Chrome 19.0.1084.52 Google Chrome 19.0.1084.21 Google Chrome 19 Google Chrome 18.0.1025.168 Google Chrome 18.0.1025.162 Google Chrome 18.0.1025.151 Google Chrome 18.0.1025.142 Google Chrome 18 Google Chrome 17.0.963.83 Google Chrome 17.0.963.78 Google Chrome 17.0.963.60 Google Chrome 17.0.963.56 Google Chrome 17.0.963.46 Google Chrome 17 Google Chrome 16.0.912.77 Google Chrome 16.0.912.75 Google Chrome 16.0.912.63 Google Chrome 16 Google Chrome 15.0.874.121 Google Chrome 15.0.874.120 Google Chrome 15 Google Chrome 14.0.835.202 Google Chrome 14.0.835.186 Google Chrome 14.0.835.163 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10 Google Chrome 1.0.154.65 Google Chrome 1.0.154.64 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.52 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.43 Google Chrome 1.0.154.42 Google Chrome 1.0.154.39 Google Chrome 1.0.154.36 Google Chrome 0.4.154.33 Google Chrome 0.4.154.31 Google Chrome 0.4.154.22 Google Chrome 0.4.154.18 Google Chrome 0.3.154.3 Google Chrome 0.3.154.0 Google Chrome 0.2.153.1 Google Chrome 0.2.152.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avant Force Avant Browser 2013 build 118 Avant Force Avant Browser 2013 build 117 Avant Browser Avant Browser 2013 build 115 |
| Not Vulnerable: |
Google Chrome 30.0.1599.66 Avant Force Avant Browser 2013 build 119 |
Discussion
Google Chrome Prior to 30.0.1599.66 Multiple Security Vulnerabilities
Google Chrome is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, bypass security restrictions, spoof the displayed URI in the address bar, or cause denial-of-service conditions; other attacks may also be possible.
Versions prior to Chrome 30.0.1599.66 are vulnerable.
Note: The issue described by CVE-2013-2924 has been moved to BID 62968 (International Components for Unicode Use After Free Remote Code Execution Vulnerability) for better documentation.
Note: The issue described by CVE-2013-2909 has been moved to BID 64354 (WebKit CVE-2013-2909 Use After Free Remote Code Execution Vulnerability) for better documentation.
Google Chrome is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, bypass security restrictions, spoof the displayed URI in the address bar, or cause denial-of-service conditions; other attacks may also be possible.
Versions prior to Chrome 30.0.1599.66 are vulnerable.
Note: The issue described by CVE-2013-2924 has been moved to BID 62968 (International Components for Unicode Use After Free Remote Code Execution Vulnerability) for better documentation.
Note: The issue described by CVE-2013-2909 has been moved to BID 64354 (WebKit CVE-2013-2909 Use After Free Remote Code Execution Vulnerability) for better documentation.
Exploit / POC
Google Chrome Prior to 30.0.1599.66 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
References
Google Chrome Prior to 30.0.1599.66 Multiple Security Vulnerabilities
References:
References:
- Avant Browser 2013 build 119, Released 11.06.2013 (Avant)
- Google Chrome Homepage (Google)
- Stable Channel Update 30.0.1599.66 (Google)