First published: Thu Mar 21 2013(Updated: )
Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome (Trace Event) | <=27.0.1444.0 | |
Google V8 | <=3.17.12 | |
Google V8 | =3.17.0 | |
Google V8 | =3.17.1 | |
Google V8 | =3.17.2 | |
Google V8 | =3.17.3 | |
Google V8 | =3.17.4 | |
Google V8 | =3.17.5 | |
Google V8 | =3.17.6 | |
Google V8 | =3.17.7 | |
Google V8 | =3.17.8 | |
Google V8 | =3.17.9 | |
Google V8 | =3.17.10 | |
Google V8 | =3.17.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-2632 has a severity rating that indicates it can lead to denial of service through application crashes.
To fix CVE-2013-2632, update Google Chrome to version 27.0.1444.3 or later, or update the Google V8 engine to version 3.17.13 or later.
CVE-2013-2632 affects Google Chrome versions prior to 27.0.1444.3 and Google V8 versions prior to 3.17.13.
CVE-2013-2632 can cause application crashes and potentially allow for other unspecified impacts due to crafted JavaScript code.
CVE-2013-2632 is considered serious due to its potential to disrupt application functionality.