← Back

CVE-2013-0885

nvd nist
Published: Feb 23, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.

Affected (4)

Opensuse
1 product
Opensuse
Google
1 product
Chrome
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Opensuse
Version 12.1
Opensuse
Version 12.2
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 25.0.1364.97
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 25.0.1364.99
Running on/withPlatform Versions
Apple
Mac Os X
All versions

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (8)

Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.