製品・ソフトウェアに関する情報

JVN脆弱性詳細

Google Chrome などで使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性

タイトル	Google Chrome などで使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性
概要	Google Chrome などで使用される WebKit には、サービス運用妨害 (DoS) 状態にされるなどの影響を受ける脆弱性が存在します。
想定される影響	攻撃者により、サービス運用妨害 (DoS) 状態にされるなどの影響を受ける可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2013年10月15日0:00
登録日	2013年10月21日11:59
最終更新日	2014年11月20日9:38

CVSS2.0 : 危険
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P

影響を受けるシステム

アップル

Apple TV 6.1 未満 (Apple TV 第 2 世代以降)

iOS 7.1 未満 (iPad 2 以降)

iOS 7.1 未満 (iPhone 4 以降)

iOS 7.1 未満 (iPod touch 第 5 世代以降)

iTunes 12.0.1 未満 (Windows)

Safari 6.1.3 未満 (OS X Lion Server v10.7.5)

Safari 6.1.3 未満 (OS X Lion v10.7.5)

Safari 6.1.3 未満 (OS X Mavericks v10.9.2)

Safari 6.1.3 未満 (OS X Mountain Lion v10.8.5)

Safari 7.0.3 未満の 7.x (OS X Lion Server v10.7.5)

Safari 7.0.3 未満の 7.x (OS X Lion v10.7.5)

Safari 7.0.3 未満の 7.x (OS X Mavericks v10.9.2)

Safari 7.0.3 未満の 7.x (OS X Mountain Lion v10.8.5)

Google

Google Chrome 30.0.1599.101 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-2928	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2928
National Vulnerability Database (NVD)
2	CVE-2013-2928	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2928

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	名前	URL
Apple Security Updates
1	HT6162	http://support.apple.com/kb/HT6162
2	HT6163	http://support.apple.com/kb/HT6163
3	HT6181	http://support.apple.com/kb/HT6181
4	HT6537	http://support.apple.com/en-eu/HT6537
Apple セキュリティアップデート
5	HT6162	http://support.apple.com/kb/HT6162?viewlocale=ja_JP
6	HT6163	http://support.apple.com/kb/HT6163?viewlocale=ja_JP
7	HT6181	http://support.apple.com/kb/HT6181?viewlocale=ja_JP
8	HT6537	http://support.apple.com/ja-jp/HT6537
Chromium
9	Issue 305790	https://code.google.com/p/chromium/issues/detail?id=305790
Debian セキュリティ勧告
10	DSA-2785	http://www.debian.org/security/2013/dsa-2785
Google
11	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
12	Stable Channel Update	http://googlechromereleases.blogspot.jp/2013/10/stable-channel-update_15.html
opensuse-security-announce
13	openSUSE-SU-2013:1776	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
14	openSUSE-SU-2013:1861	http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
opensuse-updates
15	openSUSE-SU-2013:1729	http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html

その他

No	名前	URL
JVN
1	JVNVU#90170014	http://jvn.jp/vu/JVNVU90170014/
2	JVNVU#94229445	http://jvn.jp/vu/JVNVU94229445/
3	JVNVU#94409290	http://jvn.jp/vu/JVNVU94409290/index.html
4	JVNVU#97537282	http://jvn.jp/vu/JVNVU97537282/index.html
関連文書
5	APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3	http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html

変更履歴

No	変更内容	変更日
0	[2013年10月21日] 掲載 [2014年01月09日] ベンダ情報：Debian (DSA-2785) を追加ベンダ情報：Novell (openSUSE-SU-2013:1729) を追加ベンダ情報：Novell (openSUSE-SU-2013:1861) を追加ベンダ情報：Novell (openSUSE-SU-2013:1776) を追加 [2014年03月17日] タイトル：内容を更新概要：内容を更新影響を受けるシステム：アップル (HT6162) の情報を追加影響を受けるシステム：アップル (HT6163) の情報を追加ベンダ情報：アップル (HT6162) を追加ベンダ情報：アップル (HT6163) を追加参考情報：JVN (JVNVU#94229445) を追加参考情報：JVN (JVNVU#90170014) を追加 [2014年04月04日] 影響を受けるシステム：アップル (HT6181) の情報を追加ベンダ情報：アップル (HT6181) を追加 [2014年04月08日] 参考情報：JVN (JVNVU#94409290) を追加参考情報：関連文書 (APPLE-SA-2014-04-01-1 Safari 6.1.3 and Safari 7.0.3) を追加 [2014年11月20日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT6537) を追加参考情報：JVN (JVNVU#97537282) を追加	2018年2月17日10:37

NVD脆弱性情報

CVE-2013-2928

概要	Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
公表日	2013年10月17日5:55
登録日	2021年1月26日15:39
最終更新日	2024年11月21日10:52

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:google:chrome:30.0.1599.66:::::::*
cpe:2.3:a:google:chrome:30.0.1599.6:::::::*
cpe:2.3:a:google:chrome::::::::		30.0.1599.100
cpe:2.3:a:google:chrome:30.0.1599.80:::::::*
cpe:2.3:a:google:chrome:30.0.1599.88:::::::*
cpe:2.3:a:google:chrome:30.0.1599.28:::::::*
cpe:2.3:a:google:chrome:30.0.1599.14:::::::*
cpe:2.3:a:google:chrome:30.0.1599.0:::::::*
cpe:2.3:a:google:chrome:30.0.1599.7:::::::*
cpe:2.3:a:google:chrome:30.0.1599.38:::::::*
cpe:2.3:a:google:chrome:30.0.1599.67:::::::*
cpe:2.3:a:google:chrome:30.0.1599.31:::::::*
cpe:2.3:a:google:chrome:30.0.1599.15:::::::*
cpe:2.3:a:google:chrome:30.0.1599.9:::::::*
cpe:2.3:a:google:chrome:30.0.1599.42:::::::*
cpe:2.3:a:google:chrome:30.0.1599.1:::::::*
cpe:2.3:a:google:chrome:30.0.1599.4:::::::*
cpe:2.3:a:google:chrome:30.0.1599.34:::::::*
cpe:2.3:a:google:chrome:30.0.1599.65:::::::*
cpe:2.3:a:google:chrome:30.0.1599.51:::::::*
cpe:2.3:a:google:chrome:30.0.1599.18:::::::*
cpe:2.3:a:google:chrome:30.0.1599.50:::::::*
cpe:2.3:a:google:chrome:30.0.1599.12:::::::*
cpe:2.3:a:google:chrome:30.0.1599.87:::::::*
cpe:2.3:a:google:chrome:30.0.1599.5:::::::*
cpe:2.3:a:google:chrome:30.0.1599.56:::::::*
cpe:2.3:a:google:chrome:30.0.1599.16:::::::*
cpe:2.3:a:google:chrome:30.0.1599.44:::::::*
cpe:2.3:a:google:chrome:30.0.1599.35:::::::*
cpe:2.3:a:google:chrome:30.0.1599.23:::::::*
cpe:2.3:a:google:chrome:30.0.1599.13:::::::*
cpe:2.3:a:google:chrome:30.0.1599.37:::::::*
cpe:2.3:a:google:chrome:30.0.1599.79:::::::*
cpe:2.3:a:google:chrome:30.0.1599.2:::::::*
cpe:2.3:a:google:chrome:30.0.1599.20:::::::*
cpe:2.3:a:google:chrome:30.0.1599.47:::::::*
cpe:2.3:a:google:chrome:30.0.1599.26:::::::*
cpe:2.3:a:google:chrome:30.0.1599.90:::::::*
cpe:2.3:a:google:chrome:30.0.1599.19:::::::*
cpe:2.3:a:google:chrome:30.0.1599.61:::::::*
cpe:2.3:a:google:chrome:30.0.1599.68:::::::*
cpe:2.3:a:google:chrome:30.0.1599.57:::::::*
cpe:2.3:a:google:chrome:30.0.1599.22:::::::*
cpe:2.3:a:google:chrome:30.0.1599.52:::::::*
cpe:2.3:a:google:chrome:30.0.1599.85:::::::*
cpe:2.3:a:google:chrome:30.0.1599.29:::::::*
cpe:2.3:a:google:chrome:30.0.1599.24:::::::*
cpe:2.3:a:google:chrome:30.0.1599.48:::::::*
cpe:2.3:a:google:chrome:30.0.1599.58:::::::*
cpe:2.3:a:google:chrome:30.0.1599.43:::::::*
cpe:2.3:a:google:chrome:30.0.1599.64:::::::*
cpe:2.3:a:google:chrome:30.0.1599.49:::::::*
cpe:2.3:a:google:chrome:30.0.1599.60:::::::*
cpe:2.3:a:google:chrome:30.0.1599.86:::::::*
cpe:2.3:a:google:chrome:30.0.1599.21:::::::*
cpe:2.3:a:google:chrome:30.0.1599.32:::::::*
cpe:2.3:a:google:chrome:30.0.1599.17:::::::*
cpe:2.3:a:google:chrome:30.0.1599.41:::::::*
cpe:2.3:a:google:chrome:30.0.1599.36:::::::*
cpe:2.3:a:google:chrome:30.0.1599.25:::::::*
cpe:2.3:a:google:chrome:30.0.1599.53:::::::*
cpe:2.3:a:google:chrome:30.0.1599.30:::::::*
cpe:2.3:a:google:chrome:30.0.1599.82:::::::*
cpe:2.3:a:google:chrome:30.0.1599.40:::::::*
cpe:2.3:a:google:chrome:30.0.1599.27:::::::*
cpe:2.3:a:google:chrome:30.0.1599.10:::::::*
cpe:2.3:a:google:chrome:30.0.1599.81:::::::*
cpe:2.3:a:google:chrome:30.0.1599.11:::::::*
cpe:2.3:a:google:chrome:30.0.1599.59:::::::*
cpe:2.3:a:google:chrome:30.0.1599.33:::::::*
cpe:2.3:a:google:chrome:30.0.1599.8:::::::*
cpe:2.3:a:google:chrome:30.0.1599.69:::::::*
cpe:2.3:a:google:chrome:30.0.1599.39:::::::*
cpe:2.3:a:google:chrome:30.0.1599.84:::::::*

構成1	以上	以下	より上	未満
cpe:2.3:a:google:chrome:30.0.1599.66:::::::*
cpe:2.3:a:google:chrome:30.0.1599.6:::::::*
cpe:2.3:a:google:chrome::::::::		30.0.1599.100
cpe:2.3:a:google:chrome:30.0.1599.80:::::::*
cpe:2.3:a:google:chrome:30.0.1599.88:::::::*
cpe:2.3:a:google:chrome:30.0.1599.28:::::::*
cpe:2.3:a:google:chrome:30.0.1599.14:::::::*
cpe:2.3:a:google:chrome:30.0.1599.0:::::::*
cpe:2.3:a:google:chrome:30.0.1599.7:::::::*
cpe:2.3:a:google:chrome:30.0.1599.38:::::::*
cpe:2.3:a:google:chrome:30.0.1599.67:::::::*
cpe:2.3:a:google:chrome:30.0.1599.31:::::::*
cpe:2.3:a:google:chrome:30.0.1599.15:::::::*
cpe:2.3:a:google:chrome:30.0.1599.9:::::::*
cpe:2.3:a:google:chrome:30.0.1599.42:::::::*
cpe:2.3:a:google:chrome:30.0.1599.1:::::::*
cpe:2.3:a:google:chrome:30.0.1599.4:::::::*
cpe:2.3:a:google:chrome:30.0.1599.34:::::::*
cpe:2.3:a:google:chrome:30.0.1599.65:::::::*
cpe:2.3:a:google:chrome:30.0.1599.51:::::::*
cpe:2.3:a:google:chrome:30.0.1599.18:::::::*
cpe:2.3:a:google:chrome:30.0.1599.50:::::::*
cpe:2.3:a:google:chrome:30.0.1599.12:::::::*
cpe:2.3:a:google:chrome:30.0.1599.87:::::::*
cpe:2.3:a:google:chrome:30.0.1599.5:::::::*
cpe:2.3:a:google:chrome:30.0.1599.56:::::::*
cpe:2.3:a:google:chrome:30.0.1599.16:::::::*
cpe:2.3:a:google:chrome:30.0.1599.44:::::::*
cpe:2.3:a:google:chrome:30.0.1599.35:::::::*
cpe:2.3:a:google:chrome:30.0.1599.23:::::::*
cpe:2.3:a:google:chrome:30.0.1599.13:::::::*
cpe:2.3:a:google:chrome:30.0.1599.37:::::::*
cpe:2.3:a:google:chrome:30.0.1599.79:::::::*
cpe:2.3:a:google:chrome:30.0.1599.2:::::::*
cpe:2.3:a:google:chrome:30.0.1599.20:::::::*
cpe:2.3:a:google:chrome:30.0.1599.47:::::::*
cpe:2.3:a:google:chrome:30.0.1599.26:::::::*
cpe:2.3:a:google:chrome:30.0.1599.90:::::::*
cpe:2.3:a:google:chrome:30.0.1599.19:::::::*
cpe:2.3:a:google:chrome:30.0.1599.61:::::::*
cpe:2.3:a:google:chrome:30.0.1599.68:::::::*
cpe:2.3:a:google:chrome:30.0.1599.57:::::::*
cpe:2.3:a:google:chrome:30.0.1599.22:::::::*
cpe:2.3:a:google:chrome:30.0.1599.52:::::::*
cpe:2.3:a:google:chrome:30.0.1599.85:::::::*
cpe:2.3:a:google:chrome:30.0.1599.29:::::::*
cpe:2.3:a:google:chrome:30.0.1599.24:::::::*
cpe:2.3:a:google:chrome:30.0.1599.48:::::::*
cpe:2.3:a:google:chrome:30.0.1599.58:::::::*
cpe:2.3:a:google:chrome:30.0.1599.43:::::::*
cpe:2.3:a:google:chrome:30.0.1599.64:::::::*
cpe:2.3:a:google:chrome:30.0.1599.49:::::::*
cpe:2.3:a:google:chrome:30.0.1599.60:::::::*
cpe:2.3:a:google:chrome:30.0.1599.86:::::::*
cpe:2.3:a:google:chrome:30.0.1599.21:::::::*
cpe:2.3:a:google:chrome:30.0.1599.32:::::::*
cpe:2.3:a:google:chrome:30.0.1599.17:::::::*
cpe:2.3:a:google:chrome:30.0.1599.41:::::::*
cpe:2.3:a:google:chrome:30.0.1599.36:::::::*
cpe:2.3:a:google:chrome:30.0.1599.25:::::::*
cpe:2.3:a:google:chrome:30.0.1599.53:::::::*
cpe:2.3:a:google:chrome:30.0.1599.30:::::::*
cpe:2.3:a:google:chrome:30.0.1599.82:::::::*
cpe:2.3:a:google:chrome:30.0.1599.40:::::::*
cpe:2.3:a:google:chrome:30.0.1599.27:::::::*
cpe:2.3:a:google:chrome:30.0.1599.10:::::::*
cpe:2.3:a:google:chrome:30.0.1599.81:::::::*
cpe:2.3:a:google:chrome:30.0.1599.11:::::::*
cpe:2.3:a:google:chrome:30.0.1599.59:::::::*
cpe:2.3:a:google:chrome:30.0.1599.33:::::::*
cpe:2.3:a:google:chrome:30.0.1599.8:::::::*
cpe:2.3:a:google:chrome:30.0.1599.69:::::::*
cpe:2.3:a:google:chrome:30.0.1599.39:::::::*
cpe:2.3:a:google:chrome:30.0.1599.84:::::::*

No	URL	refsource	タグ
1	http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
2	http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
3	http://crbug.com/303657
4	http://crbug.com/303657
5	http://crbug.com/303772
6	http://crbug.com/303772
7	http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
8	http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
9	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
10	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
11	http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
12	http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
13	http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html
14	http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html
15	http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
16	http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
17	http://support.apple.com/kb/HT6162
18	http://support.apple.com/kb/HT6162
19	http://support.apple.com/kb/HT6163
20	http://support.apple.com/kb/HT6163
21	http://www.debian.org/security/2013/dsa-2785
22	http://www.debian.org/security/2013/dsa-2785
23	https://code.google.com/p/chromium/issues/detail?id=305790
24	https://code.google.com/p/chromium/issues/detail?id=305790
25	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19065
26	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19065
27	https://support.apple.com/kb/HT6537
28	https://support.apple.com/kb/HT6537