CVE-2013-2881

Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.4:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.5:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.6:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.8:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.9:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.10:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.11:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.12:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.13:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.14:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.15:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.16:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.17:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.18:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.19:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.20:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.21:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.22:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.23:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.24:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.25:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.26:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.27:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.28:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.29:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.31:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.32:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.33:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.34:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.35:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.36:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.37:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.39:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.40:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.41:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.42:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.43:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.44:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.45:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.46:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.47:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.48:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.49:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.50:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.51:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.52:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.53:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.54:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.56:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.58:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.59:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.60:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.61:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.62:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.63:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.64:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.66:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.68:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.70:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.71:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.72:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.89:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.91:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:28.0.1500.93:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:52

Type Values Removed Values Added
References () http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html - () http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html -
References () http://www.debian.org/security/2013/dsa-2732 - () http://www.debian.org/security/2013/dsa-2732 -
References () https://code.google.com/p/chromium/issues/detail?id=257748 - () https://code.google.com/p/chromium/issues/detail?id=257748 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17348 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17348 -
References () https://src.chromium.org/viewvc/blink?revision=153929&view=revision - () https://src.chromium.org/viewvc/blink?revision=153929&view=revision -

07 Nov 2023, 02:15

Type Values Removed Values Added
References (CONFIRM) https://src.chromium.org/viewvc/blink?revision=153929&view=revision - Patch, Issue Tracking () https://src.chromium.org/viewvc/blink?revision=153929&view=revision -
References (DEBIAN) http://www.debian.org/security/2013/dsa-2732 - Third Party Advisory () http://www.debian.org/security/2013/dsa-2732 -
References (CONFIRM) https://code.google.com/p/chromium/issues/detail?id=257748 - Patch, Issue Tracking () https://code.google.com/p/chromium/issues/detail?id=257748 -
References (CONFIRM) http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html - Vendor Advisory () http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html -

Information

Published : 2013-07-31 13:20

Updated : 2024-11-21 01:52


NVD link : CVE-2013-2881

Mitre link : CVE-2013-2881

CVE.ORG link : CVE-2013-2881


JSON object : View

Products Affected

google

  • chrome

debian

  • debian_linux
CWE
CWE-264

Permissions, Privileges, and Access Controls