PT-2013-4035

CVE-2013-2917

Publicado

2013-10-01

Atualizado

2024-06-15

Descrição por

CVSS 2.0

5.0

Média

MétricasAV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66

Description The issue is related to the ReverbConvolverStage function in the Web Audio implementation in Blink. It allows remote attackers to cause a denial of service due to an out-of-bounds read via vectors related to the impulseResponse array.

Recommendations For versions prior to 30.0.1599.66, update to version 30.0.1599.66 or later to resolve the issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Byoungyoung Lee

Tielei Wang

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer