CVE-2013-2861: Use After Free
Published Jun 5, 2013
·Updated
Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Software
83 affected components
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Google Chrome<=27.0.1453.109
Google Chrome=27.0.1453.0
Google Chrome=27.0.1453.1
Google Chrome=27.0.1453.2
Google Chrome=27.0.1453.3
Google Chrome=27.0.1453.4
Google Chrome=27.0.1453.5
Google Chrome=27.0.1453.6
Google Chrome=27.0.1453.7
Google Chrome=27.0.1453.8
Google Chrome=27.0.1453.9
Google Chrome=27.0.1453.10
Google Chrome=27.0.1453.11
Google Chrome=27.0.1453.12
Google Chrome=27.0.1453.13
Google Chrome=27.0.1453.15
Google Chrome=27.0.1453.34
Google Chrome=27.0.1453.35
Google Chrome=27.0.1453.36
Google Chrome=27.0.1453.37
Google Chrome=27.0.1453.38
Google Chrome=27.0.1453.39
Google Chrome=27.0.1453.40
Google Chrome=27.0.1453.41
Google Chrome=27.0.1453.42
Google Chrome=27.0.1453.43
Google Chrome=27.0.1453.44
Google Chrome=27.0.1453.45
Google Chrome=27.0.1453.46
Google Chrome=27.0.1453.47
Google Chrome=27.0.1453.49
Google Chrome=27.0.1453.50
Google Chrome=27.0.1453.51
Google Chrome=27.0.1453.52
Google Chrome=27.0.1453.54
Google Chrome=27.0.1453.55
Google Chrome=27.0.1453.56
Google Chrome=27.0.1453.57
Google Chrome=27.0.1453.58
Google Chrome=27.0.1453.59
Google Chrome=27.0.1453.60
Google Chrome=27.0.1453.61
Google Chrome=27.0.1453.62
Google Chrome=27.0.1453.63
Google Chrome=27.0.1453.64
Google Chrome=27.0.1453.65
Google Chrome=27.0.1453.66
Google Chrome=27.0.1453.67
Google Chrome=27.0.1453.68
Google Chrome=27.0.1453.69
Google Chrome=27.0.1453.70
Google Chrome=27.0.1453.71
Google Chrome=27.0.1453.72
Google Chrome=27.0.1453.73
Google Chrome=27.0.1453.74
Google Chrome=27.0.1453.75
Google Chrome=27.0.1453.76
Google Chrome=27.0.1453.77
Google Chrome=27.0.1453.78
Google Chrome=27.0.1453.79
Google Chrome=27.0.1453.80
Google Chrome=27.0.1453.81
Google Chrome=27.0.1453.82
Google Chrome=27.0.1453.83
Google Chrome=27.0.1453.84
Google Chrome=27.0.1453.85
Google Chrome=27.0.1453.86
Google Chrome=27.0.1453.87
Google Chrome=27.0.1453.88
Google Chrome=27.0.1453.89
Google Chrome=27.0.1453.90
Google Chrome=27.0.1453.91
Google Chrome=27.0.1453.93
Google Chrome=27.0.1453.94
Google Chrome=27.0.1453.102
Google Chrome=27.0.1453.103
Google Chrome=27.0.1453.104
Google Chrome=27.0.1453.105
Google Chrome=27.0.1453.106
Google Chrome=27.0.1453.107
Google Chrome=27.0.1453.108
Event History
Jun 5, 2013
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2861?
CVE-2013-2861 has a medium severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2013-2861?
To fix CVE-2013-2861, update Google Chrome to version 27.0.1453.110 or later.
3
What software is affected by CVE-2013-2861?
CVE-2013-2861 affects multiple versions of Google Chrome prior to 27.0.1453.110 and Debian Linux versions 7.0 and 8.0.
4
What type of vulnerability is CVE-2013-2861?
CVE-2013-2861 is a use-after-free vulnerability found in the SVG implementation of Google Chrome.
5
Is CVE-2013-2861 being actively exploited?
There is no public indication that CVE-2013-2861 is being actively exploited in the wild, but it is advisable to patch it as a precaution.