CVE-2013-0910

Published Mar 4, 2013 CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Description
Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-0921 Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 2:41 PM
Reserved
Jan 7, 2013, 12:00 AM
Status
Modified
Published
Mar 5, 2013, 9:55 PM
Modified
Jun 16, 2026, 11:50 PM