CVE-2013-6802
Publication date 18 November 2013
Last updated 24 July 2024
Ubuntu priority
Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | 13.10 saucy |
Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
|
13.04 raring |
Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
|
|
12.10 quantal |
Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
|
|
12.04 LTS precise |
Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
|
|
10.04 LTS lucid | Ignored end of life |
References
Other references
- https://code.google.com/p/chromium/issues/detail?id=319125
- https://code.google.com/p/chromium/issues/detail?id=319117
- http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
- http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
- https://www.cve.org/CVERecord?id=CVE-2013-6802