CVE-2013-2912

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66

Description A use-after-free issue exists in the PepperInProcessRouter::SendToHost function, which is part of the Pepper Plug-in API (PPAPI) in Google Chrome. This issue can be exploited by remote attackers via vectors involving a resource-destruction message, potentially causing a denial of service or having other unspecified impacts.

Recommendations For versions prior to 30.0.1599.66, update to version 30.0.1599.66 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Pepper Plug-in API until a patch is applied.