CVE-2013-6661

critical

Description

Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.

References

https://code.google.com/p/chromium/issues/detail?id=344876

https://code.google.com/p/chromium/issues/detail?id=341220

https://code.google.com/p/chromium/issues/detail?id=339337

https://code.google.com/p/chromium/issues/detail?id=338561

https://code.google.com/p/chromium/issues/detail?id=338532

https://code.google.com/p/chromium/issues/detail?id=338464

https://code.google.com/p/chromium/issues/detail?id=334274

https://code.google.com/p/chromium/issues/detail?id=333885

https://code.google.com/p/chromium/issues/detail?id=332957

https://code.google.com/p/chromium/issues/detail?id=330750

https://code.google.com/p/chromium/issues/detail?id=330222

https://code.google.com/p/chromium/issues/detail?id=329651

https://code.google.com/p/chromium/issues/detail?id=328620

https://code.google.com/p/chromium/issues/detail?id=326860

https://code.google.com/p/chromium/issues/detail?id=324812

https://code.google.com/p/chromium/issues/detail?id=314088

https://code.google.com/p/chromium/issues/detail?id=313005

https://code.google.com/p/chromium/issues/detail?id=312016

https://code.google.com/p/chromium/issues/detail?id=294687

http://www.debian.org/security/2014/dsa-2883

http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

Details

Source: Mitre, NVD

Published: 2014-02-24

Updated: 2014-04-01

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical