CVE-2013-6802

Publication date 18 November 2013

Last updated 24 July 2024

Ubuntu priority

Description

Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	13.10 saucy	Fixed 31.0.1650.63-0ubuntu0.13.10.1~20131204.1
	13.04 raring	Fixed 31.0.1650.63-0ubuntu0.13.04.1~20131204.1
	12.10 quantal	Fixed 31.0.1650.63-0ubuntu0.12.10.1~20131204.1
	12.04 LTS precise	Fixed 31.0.1650.63-0ubuntu0.12.04.1~20131204.1
	10.04 LTS lucid	Ignored end of life

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://code.google.com/p/chromium/issues/detail?id=319125
https://code.google.com/p/chromium/issues/detail?id=319117
http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html
http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
https://www.cve.org/CVERecord?id=CVE-2013-6802

CVE-2013-6802

Description

Status

References

Other references

Access our resources on patching vulnerabilities