CVE-2013-2849

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Other references

• https://code.google.com/p/chromium/issues/detail?id=171392
• http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
• https://code.google.com/p/chromium/issues/detail?id=241595
• https://code.google.com/p/chromium/issues/detail?id=236631
• https://code.google.com/p/chromium/issues/detail?id=232865
• https://code.google.com/p/chromium/issues/detail?id=232532
• https://code.google.com/p/chromium/issues/detail?id=232389
• https://code.google.com/p/chromium/issues/detail?id=231725
• https://code.google.com/p/chromium/issues/detail?id=229402
• https://code.google.com/p/chromium/issues/detail?id=227390
• https://code.google.com/p/chromium/issues/detail?id=226659
• https://code.google.com/p/chromium/issues/detail?id=226090
• https://code.google.com/p/chromium/issues/detail?id=226012
• https://code.google.com/p/chromium/issues/detail?id=225979
• https://code.google.com/p/chromium/issues/detail?id=225403
• https://code.google.com/p/chromium/issues/detail?id=224920
• https://code.google.com/p/chromium/issues/detail?id=223145
• https://code.google.com/p/chromium/issues/detail?id=223125
• https://code.google.com/p/chromium/issues/detail?id=223034
• https://code.google.com/p/chromium/issues/detail?id=222770
• https://code.google.com/p/chromium/issues/detail?id=222754
• https://code.google.com/p/chromium/issues/detail?id=222036
• https://code.google.com/p/chromium/issues/detail?id=196648
• https://code.google.com/p/chromium/issues/detail?id=196575
• https://code.google.com/p/chromium/issues/detail?id=196571
• https://code.google.com/p/chromium/issues/detail?id=181438
• https://code.google.com/p/chromium/issues/detail?id=181375
• https://code.google.com/p/chromium/issues/detail?id=180920
• https://code.google.com/p/chromium/issues/detail?id=180058
• https://code.google.com/p/chromium/issues/detail?id=179580
• https://code.google.com/p/chromium/issues/detail?id=178761
• https://code.google.com/p/chromium/issues/detail?id=178581
• https://code.google.com/p/chromium/issues/detail?id=178269
• https://code.google.com/p/chromium/issues/detail?id=178130
• https://code.google.com/p/chromium/issues/detail?id=177815
• https://code.google.com/p/chromium/issues/detail?id=176719
• https://code.google.com/p/chromium/issues/detail?id=174920
• https://code.google.com/p/chromium/issues/detail?id=173672
• https://code.google.com/p/chromium/issues/detail?id=173397
• https://code.google.com/p/chromium/issues/detail?id=170715
• https://code.google.com/p/chromium/issues/detail?id=168050
• https://code.google.com/p/chromium/issues/detail?id=162896
• http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
• https://www.cve.org/CVERecord?id=CVE-2013-2849