Details of VAR-201307-0325

ID

VAR-201307-0325

CVE

CVE-2013-2872

TITLE

Mac OS X upper Google Chrome Vulnerabilities that can break the cryptographic protection mechanisms of third-party components

Trust: 0.8

sources: JVNDB: JVNDB-2013-003299

DESCRIPTION

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors. Google Chrome is prone to a security vulnerability. The impact of this issue is currently unknown. We will update this BID as more information emerges. Versions prior to Chrome 28.0.1500.71 are vulnerable. NOTE: This issue was previously covered in BID 61041 (Google Chrome Prior to 28.0.1500.71 Multiple Security Vulnerabilities) but has been given its own record for better documentation. Google Chrome is a web browser developed by Google (Google). The vulnerability stems from the fact that the program does not determine an entropy value with sufficient resources for the renderer process. A remote attacker can exploit this vulnerability to crack the encryption protection mechanism through third-party components

Trust: 1.98

sources: NVD: CVE-2013-2872 // JVNDB: JVNDB-2013-003299 // BID: 61053 // VULHUB: VHN-62874

AFFECTED PRODUCTS

vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.60	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.64	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.63	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.62	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.44	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.59	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.38	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.35	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.39	Trust: 1.6
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.24	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.52	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.10	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.18	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.33	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.42	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.51	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.6	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.31	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.14	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.3	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.12	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.8	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.43	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.28	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.34	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.20	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.9	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.41	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.27	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.21	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.5	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.45	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.46	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.23	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.17	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.26	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.48	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.25	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.50	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.11	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.15	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.2	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.68	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.49	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.36	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.53	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.56	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.37	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.40	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.0	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.22	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.58	Trust: 1.0
vendor:	google	model:	chrome	scope:	lte	version:	28.0.1500.70	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.66	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.13	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.19	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.32	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.29	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.47	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.16	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.61	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.54	Trust: 1.0
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.4	Trust: 1.0
vendor:	google	model:	chrome	scope:	lt	version:	28.0.1500.71	Trust: 0.8
vendor:	google	model:	chrome	scope:	eq	version:	28.0.1500.70	Trust: 0.6
vendor:	google	model:	chrome	scope:	eq	version:	27.0.14443	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364160	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	16.0.91275	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	15.0.874102	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.21	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.3.1549	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	9.0.597.94	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	9.0.597.84	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	9.0.597.107	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	9	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.344	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.310	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.309	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.308	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.307	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.306	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.305	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.304	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.303	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.302	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.301	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.300	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.237	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.226	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.225	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.224	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.223	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.222	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.221	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.220	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.219	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.218	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.217	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.216	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.215	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.214	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.213	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.212	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.211	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.210	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.21	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.209	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.208	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.207	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.206	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.205	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.204	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.203	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.202	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.201	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.200	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.20	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.19	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.18	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.17	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.16	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.15	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.14	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.13	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.12	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.11	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.105	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.104	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.103	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.102	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.101	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.100	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.10	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.552.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.551.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.551.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	8.0.549.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	7.0.500.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	7.0.499.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	7.0.499.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	7.0.498.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	7.0.497.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.408.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.408.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.400.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.399.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.398.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	6.0.397.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.326.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.325.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.324.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.323.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.322.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.321.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.320.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.319.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.318.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.317.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.316.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.315.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.314.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.313.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.309.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.308.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.307.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	5.0.306.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	4	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.37	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.36	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.27	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.25	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.195.2	Trust: 0.3
vendor:	google	model:	chrome beta	scope:	eq	version:	3.0.193.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.190.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3.0.182.2	Trust: 0.3
vendor:	google	model:	chrome beta	scope:	eq	version:	3.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	3	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	27.0.1453.93	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	27.0.1453.110	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.64	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.63	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.53	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.46	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.43	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	26.0.1410.28	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364.99	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364.97	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364.95	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364.172	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25.0.1364.152	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	25	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	24.0.1312.70	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	24.0.1312.57	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	24.0.1312.56	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	24.0.1312.52	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	23.0.1271.97	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	23.0.1271.95	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	23.0.1271.91	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	23.0.1271.64	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	22.0.1229.94	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	22.0.1229.92	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	22.0.1229.79	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	22	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.89	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.83	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.82	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.81	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.79	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.75	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.60	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.57	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.50	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21.0.1180.49	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	21	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	20.0.1132.57	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	20.0.1132.43	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	20.0.1132.23	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172.8	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172.38	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172.28	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172.27	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.172	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.170.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.169.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.169.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.159.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.158.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.157.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.157.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	2.0.156.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	19.0.1084.52	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	19.0.1084.21	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	19	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	18.0.1025.168	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	18.0.1025.162	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	18.0.1025.151	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	18.0.1025.142	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	18	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17.0.963.83	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17.0.963.78	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17.0.963.60	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17.0.963.56	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17.0.963.46	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	17	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	16.0.912.77	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	16.0.912.75	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	16.0.912.63	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	16	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	15.0.874.121	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	15.0.874.120	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	15	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	14.0.835.202	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	14.0.835.186	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	14.0.835.163	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	14	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	13.0.782.215	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	13.0.782.112	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	13.0.782.107	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	13	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	12.0.742.91	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	12.0.742.112	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	12.0.742.100	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	12	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.77	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.71	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.68	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.65	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.57	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.696.43	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11.0.672.2	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	11	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10.0.648.205	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10.0.648.204	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10.0.648.133	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10.0.648.128	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10.0.648.127	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	10	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.65	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.64	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.59	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.55	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.53	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.52	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.48	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.46	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.43	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.42	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.39	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	1.0.154.36	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.4.154.33	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.4.154.31	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.4.154.22	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.4.154.18	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.3.154.3	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.3.154.0	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.2.153.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	eq	version:	0.2.152.1	Trust: 0.3
vendor:	google	model:	chrome	scope:	ne	version:	28.0.1500.71	Trust: 0.3

sources: BID: 61053 // JVNDB: JVNDB-2013-003299 // CNNVD: CNNVD-201307-194 // NVD: CVE-2013-2872

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-2872
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-2872
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201307-194
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-62874
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-2872
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-62874
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-62874 // JVNDB: JVNDB-2013-003299 // CNNVD: CNNVD-201307-194 // NVD: CVE-2013-2872

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2013-2872

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201307-194

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201307-194

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-003299

PATCH

title:	Google Chrome	url:	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja	Trust: 0.8
title:	Stable Channel Update	url:	http://googlechromereleases.blogspot.jp/2013/07/stable-channel-update.html	Trust: 0.8
title:	Allow sandboxed OS X processes to open /dev/urandom	url:	http://git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=5e3678ea33ab00b5977bde219cd9ec6f1768d78a	Trust: 0.8
title:	Google Chrome_28.0.1500.72	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=46365	Trust: 0.6

sources: JVNDB: JVNDB-2013-003299 // CNNVD: CNNVD-201307-194

EXTERNAL IDS

db:	NVD	id:	CVE-2013-2872	Trust: 2.8
db:	JVNDB	id:	JVNDB-2013-003299	Trust: 0.8
db:	CNNVD	id:	CNNVD-201307-194	Trust: 0.7
db:	BID	id:	61053	Trust: 0.4
db:	VULHUB	id:	VHN-62874	Trust: 0.1

sources: VULHUB: VHN-62874 // BID: 61053 // JVNDB: JVNDB-2013-003299 // CNNVD: CNNVD-201307-194 // NVD: CVE-2013-2872

REFERENCES

url:	http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html	Trust: 1.7
url:	https://code.google.com/p/chromium/issues/detail?id=242702	Trust: 1.7
url:	http://git.chromium.org/gitweb/?p=chromium/chromium.git%3ba=commit%3bh=5e3678ea33ab00b5977bde219cd9ec6f1768d78a	Trust: 1.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2872	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-2872	Trust: 0.8
url:	http://git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=5e3678ea33ab00b5977bde219cd9ec6f1768d78a	Trust: 0.7
url:	http://www.google.com/chrome	Trust: 0.3
url:	http://googlechromereleases.blogspot.in/2013/07/stable-channel-update.html	Trust: 0.3

sources: VULHUB: VHN-62874 // BID: 61053 // JVNDB: JVNDB-2013-003299 // CNNVD: CNNVD-201307-194 // NVD: CVE-2013-2872

CREDITS

Eric Rescorla

Trust: 0.3

sources: BID: 61053

SOURCES

db:	VULHUB	id:	VHN-62874
db:	BID	id:	61053
db:	JVNDB	id:	JVNDB-2013-003299
db:	CNNVD	id:	CNNVD-201307-194
db:	NVD	id:	CVE-2013-2872

LAST UPDATE DATE

2025-04-11T22:53:18.029000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-62874	date:	2013-07-10T00:00:00
db:	BID	id:	61053	date:	2013-07-09T00:00:00
db:	JVNDB	id:	JVNDB-2013-003299	date:	2013-07-11T00:00:00
db:	CNNVD	id:	CNNVD-201307-194	date:	2013-07-17T00:00:00
db:	NVD	id:	CVE-2013-2872	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-62874	date:	2013-07-10T00:00:00
db:	BID	id:	61053	date:	2013-07-09T00:00:00
db:	JVNDB	id:	JVNDB-2013-003299	date:	2013-07-11T00:00:00
db:	CNNVD	id:	CNNVD-201307-194	date:	2013-07-17T00:00:00
db:	NVD	id:	CVE-2013-2872	date:	2013-07-10T10:55:01.977