CVE-2013-0885
First published: Sat Feb 23 2013(Updated: )
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SUSE Linux | =12.1 | |
| SUSE Linux | =12.2 | |
| Google Chrome | <25.0.1364.97 | |
| Linux Kernel | ||
| Microsoft Windows | ||
| Google Chrome | <25.0.1364.99 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-0885?
CVE-2013-0885 is classified as a medium severity vulnerability due to improper API privilege restrictions.
How do I fix CVE-2013-0885?
To fix CVE-2013-0885, update Google Chrome to version 25.0.1364.97 or later.
Which versions of Google Chrome are affected by CVE-2013-0885?
Google Chrome versions before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X are affected by CVE-2013-0885.
What impact does CVE-2013-0885 have?
CVE-2013-0885 has unspecified impacts and attack vectors related to API privileges during interaction with the Chrome Web Store.
Is there a specific platform vulnerable to CVE-2013-0885?
CVE-2013-0885 primarily affects Google Chrome on Windows, Linux, and Mac OS X.
- agent/references
- agent/type
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/opensuse
- canonical/suse linux
- version/suse linux/12.1
- version/suse linux/12.2
- vendor/google
- canonical/google chrome (trace event)
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/apple
- canonical/apple ios and macos