CVE-2013-0900: Race Condition
First published: Sat Feb 23 2013(Updated: )
Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Chrome | <25.0.1364.97 | |
| Linux Kernel | ||
| Microsoft Windows Operating System | ||
| Google Chrome | <25.0.1364.99 | |
| Apple iOS and macOS | ||
| Debian Linux | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
- http://jvn.jp/en/jp/JVN70739377/index.html
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
- http://www.debian.org/security/2013/dsa-2786
- https://code.google.com/p/chromium/issues/detail?id=152442
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404
Frequently Asked Questions
What is the severity of CVE-2013-0900?
CVE-2013-0900 has a high severity level due to its potential to cause denial of service and other impacts.
How do I fix CVE-2013-0900?
To fix CVE-2013-0900, update Google Chrome to version 25.0.1364.97 or later for Windows and Linux, or 25.0.1364.99 or later for Mac OS X.
Which versions of Google Chrome are affected by CVE-2013-0900?
Google Chrome versions prior to 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X are affected by CVE-2013-0900.
Can CVE-2013-0900 be exploited remotely?
Yes, CVE-2013-0900 can be exploited remotely, allowing attackers to trigger denial of service.
What platforms are vulnerable to CVE-2013-0900?
CVE-2013-0900 affects Google Chrome on Windows, Linux, and Mac OS X systems up to specific versions.
- agent/references
- agent/type
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google chrome
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows operating system
- vendor/apple
- canonical/apple ios and macos
- vendor/debian
- canonical/debian linux
- version/debian linux/6.0