製品・ソフトウェアに関する情報

JVN脆弱性詳細

Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

タイトル	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
概要	Google Chrome には、テキスト入力要素の x-webkit-speech 属性に関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。
想定される影響	第三者により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2013年11月12日0:00
登録日	2013年11月14日17:33
最終更新日	2013年11月14日17:33

CVSS2.0 : 危険
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P

影響を受けるシステム

Google

Google Chrome 31.0.1650.48 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-6621	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6621
National Vulnerability Database (NVD)
2	CVE-2013-6621	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6621

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	名前	URL
Google
1	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
2	Stable Channel Update	http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html

変更履歴

No	変更内容	変更日
0	[2013年11月14日] 掲載	2018年2月17日10:37

NVD脆弱性情報

CVE-2013-6621

概要	Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.
公表日	2013年11月14日0:55
登録日	2021年1月26日15:48
最終更新日	2024年11月21日10:59

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:o:opensuse:opensuse:12.3:::::::*
cpe:2.3:o:opensuse:opensuse:12.2:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:google:chrome:31.0.1650.22:::::::*
cpe:2.3:a:google:chrome:31.0.1650.45:::::::*
cpe:2.3:a:google:chrome:31.0.1650.11:::::::*
cpe:2.3:a:google:chrome:31.0.1650.33:::::::*
cpe:2.3:a:google:chrome:31.0.1650.32:::::::*
cpe:2.3:a:google:chrome:31.0.1650.31:::::::*
cpe:2.3:a:google:chrome:31.0.1650.28:::::::*
cpe:2.3:a:google:chrome:31.0.1650.26:::::::*
cpe:2.3:a:google:chrome:31.0.1650.4:::::::*
cpe:2.3:a:google:chrome:31.0.1650.2:::::::*
cpe:2.3:a:google:chrome:31.0.1650.16:::::::*
cpe:2.3:a:google:chrome:31.0.1650.39:::::::*
cpe:2.3:a:google:chrome:31.0.1650.41:::::::*
cpe:2.3:a:google:chrome:31.0.1650.38:::::::*
cpe:2.3:a:google:chrome:31.0.1650.5:::::::*
cpe:2.3:a:google:chrome::::::::		31.0.1650.47
cpe:2.3:a:google:chrome:31.0.1650.36:::::::*
cpe:2.3:a:google:chrome:31.0.1650.43:::::::*
cpe:2.3:a:google:chrome:31.0.1650.34:::::::*
cpe:2.3:a:google:chrome:31.0.1650.13:::::::*
cpe:2.3:a:google:chrome:31.0.1650.44:::::::*
cpe:2.3:a:google:chrome:31.0.1650.23:::::::*
cpe:2.3:a:google:chrome:31.0.1650.17:::::::*
cpe:2.3:a:google:chrome:31.0.1650.19:::::::*
cpe:2.3:a:google:chrome:31.0.1650.20:::::::*
cpe:2.3:a:google:chrome:31.0.1650.14:::::::*
cpe:2.3:a:google:chrome:31.0.1650.10:::::::*
cpe:2.3:a:google:chrome:31.0.1650.46:::::::*
cpe:2.3:a:google:chrome:31.0.1650.7:::::::*
cpe:2.3:a:google:chrome:31.0.1650.37:::::::*
cpe:2.3:a:google:chrome:31.0.1650.29:::::::*
cpe:2.3:a:google:chrome:31.0.1650.8:::::::*
cpe:2.3:a:google:chrome:31.0.1650.25:::::::*
cpe:2.3:a:google:chrome:31.0.1650.9:::::::*
cpe:2.3:a:google:chrome:31.0.1650.3:::::::*
cpe:2.3:a:google:chrome:31.0.1650.12:::::::*
cpe:2.3:a:google:chrome:31.0.1650.15:::::::*
cpe:2.3:a:google:chrome:31.0.1650.30:::::::*
cpe:2.3:a:google:chrome:31.0.1650.35:::::::*
cpe:2.3:a:google:chrome:31.0.1650.27:::::::*
cpe:2.3:a:google:chrome:31.0.1650.42:::::::*
cpe:2.3:a:google:chrome:31.0.1650.6:::::::*
cpe:2.3:a:google:chrome:31.0.1650.0:::::::*
cpe:2.3:a:google:chrome:31.0.1650.18:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

関連情報、対策とツール

No	URL	タグ
1	http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html	Vendor Advisory
2	http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html	Vendor Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html	Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html	Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html	Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html	Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html	Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html	Third Party Advisory
9	http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html	Third Party Advisory
10	http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html	Third Party Advisory
11	http://www.debian.org/security/2013/dsa-2799	Third Party Advisory
12	http://www.debian.org/security/2013/dsa-2799	Third Party Advisory
13	https://code.google.com/p/chromium/issues/detail?id=268565	Exploit
14	https://code.google.com/p/chromium/issues/detail?id=268565	Exploit
15	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19006
16	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19006

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

構成2	以上	以下	より上	未満
cpe:2.3:a:google:chrome:31.0.1650.22:::::::*
cpe:2.3:a:google:chrome:31.0.1650.45:::::::*
cpe:2.3:a:google:chrome:31.0.1650.11:::::::*
cpe:2.3:a:google:chrome:31.0.1650.33:::::::*
cpe:2.3:a:google:chrome:31.0.1650.32:::::::*
cpe:2.3:a:google:chrome:31.0.1650.31:::::::*
cpe:2.3:a:google:chrome:31.0.1650.28:::::::*
cpe:2.3:a:google:chrome:31.0.1650.26:::::::*
cpe:2.3:a:google:chrome:31.0.1650.4:::::::*
cpe:2.3:a:google:chrome:31.0.1650.2:::::::*
cpe:2.3:a:google:chrome:31.0.1650.16:::::::*
cpe:2.3:a:google:chrome:31.0.1650.39:::::::*
cpe:2.3:a:google:chrome:31.0.1650.41:::::::*
cpe:2.3:a:google:chrome:31.0.1650.38:::::::*
cpe:2.3:a:google:chrome:31.0.1650.5:::::::*
cpe:2.3:a:google:chrome::::::::		31.0.1650.47
cpe:2.3:a:google:chrome:31.0.1650.36:::::::*
cpe:2.3:a:google:chrome:31.0.1650.43:::::::*
cpe:2.3:a:google:chrome:31.0.1650.34:::::::*
cpe:2.3:a:google:chrome:31.0.1650.13:::::::*
cpe:2.3:a:google:chrome:31.0.1650.44:::::::*
cpe:2.3:a:google:chrome:31.0.1650.23:::::::*
cpe:2.3:a:google:chrome:31.0.1650.17:::::::*
cpe:2.3:a:google:chrome:31.0.1650.19:::::::*
cpe:2.3:a:google:chrome:31.0.1650.20:::::::*
cpe:2.3:a:google:chrome:31.0.1650.14:::::::*
cpe:2.3:a:google:chrome:31.0.1650.10:::::::*
cpe:2.3:a:google:chrome:31.0.1650.46:::::::*
cpe:2.3:a:google:chrome:31.0.1650.7:::::::*
cpe:2.3:a:google:chrome:31.0.1650.37:::::::*
cpe:2.3:a:google:chrome:31.0.1650.29:::::::*
cpe:2.3:a:google:chrome:31.0.1650.8:::::::*
cpe:2.3:a:google:chrome:31.0.1650.25:::::::*
cpe:2.3:a:google:chrome:31.0.1650.9:::::::*
cpe:2.3:a:google:chrome:31.0.1650.3:::::::*
cpe:2.3:a:google:chrome:31.0.1650.12:::::::*
cpe:2.3:a:google:chrome:31.0.1650.15:::::::*
cpe:2.3:a:google:chrome:31.0.1650.30:::::::*
cpe:2.3:a:google:chrome:31.0.1650.35:::::::*
cpe:2.3:a:google:chrome:31.0.1650.27:::::::*
cpe:2.3:a:google:chrome:31.0.1650.42:::::::*
cpe:2.3:a:google:chrome:31.0.1650.6:::::::*
cpe:2.3:a:google:chrome:31.0.1650.0:::::::*
cpe:2.3:a:google:chrome:31.0.1650.18:::::::*