Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0875.

The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access.


Provide references for further information: Can you share references or external links related to CVE-2013-0875?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1ac0fa50eff30d413206cffa5f47f7fe6d4849b1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ffmpeg.org/security.html'}, {'name': 'GLSA-201603-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-06'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0875?


Explain the CVE ID: What does the identifier CVE-2013-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0876.

Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access.


Provide references for further information: Can you share references or external links related to CVE-2013-0876?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5260edee7e5bd975837696c8c8c1a80eb2fbd7c1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ffmpeg.org/security.html'}, {'name': 'GLSA-201603-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-06'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0876?


Explain the CVE ID: What does the identifier CVE-2013-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0877.

The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access.


Provide references for further information: Can you share references or external links related to CVE-2013-0877?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ffmpeg.org/security.html'}, {'name': 'GLSA-201603-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=365270aec5c2b9284230abc702b11168818f14cf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0877?


Explain the CVE ID: What does the identifier CVE-2013-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0878.

The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an out-of-bounds array access.


Provide references for further information: Can you share references or external links related to CVE-2013-0878?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ffmpeg.org/security.html'}, {'name': 'GLSA-201603-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f5955d9f6f9ffdb81864c3de1c7b801782a55725'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0878?


Explain the CVE ID: What does the identifier CVE-2013-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0879.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implement web audio nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0879?

{'name': 'oval:org.mitre.oval:def:16505', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16505'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5785'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': '54886', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/54886'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5934'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172243'}, {'name': 'APPLE-SA-2013-06-04-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html'}, {'name': 'APPLE-SA-2013-09-18-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0879?


Explain the CVE ID: What does the identifier CVE-2013-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0880.

Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to databases.


Provide references for further information: Can you share references or external links related to CVE-2013-0880?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16081', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16081'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=171951'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0880?


Explain the CVE ID: What does the identifier CVE-2013-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0881.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via crafted data in the Matroska container format.


Provide references for further information: Can you share references or external links related to CVE-2013-0881?

{'name': 'oval:org.mitre.oval:def:16473', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16473'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=167069'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0881?


Explain the CVE ID: What does the identifier CVE-2013-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0882.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via a large number of SVG parameters.


Provide references for further information: Can you share references or external links related to CVE-2013-0882?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16468', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16468'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=165432'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0882?


Explain the CVE ID: What does the identifier CVE-2013-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0883.

Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0883?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16499', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16499'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=142169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0883?


Explain the CVE ID: What does the identifier CVE-2013-0884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0884.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Native Client (aka NaCl) code, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0884?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172984'}, {'name': 'oval:org.mitre.oval:def:16101', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16101'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0884?


Explain the CVE ID: What does the identifier CVE-2013-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0885.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0885?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16255', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16255'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172369'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0885?


Explain the CVE ID: What does the identifier CVE-2013-0886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0886.

Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client (aka NaCl) code, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0886?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=171569'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0886?


Explain the CVE ID: What does the identifier CVE-2013-0887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0887.

The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0887?

{'name': 'oval:org.mitre.oval:def:15788', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=170836'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=171065'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0887?


Explain the CVE ID: What does the identifier CVE-2013-0888 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0888.

Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a "user gesture check for dangerous file downloads."


Provide references for further information: Can you share references or external links related to CVE-2013-0888?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=170666'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16303', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16303'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0888?


Explain the CVE ID: What does the identifier CVE-2013-0889 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0889.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.


Provide references for further information: Can you share references or external links related to CVE-2013-0889?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=170569'}, {'name': 'oval:org.mitre.oval:def:16233', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16233'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0889?


Explain the CVE ID: What does the identifier CVE-2013-0890 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0890.

Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0890?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169973'}, {'name': 'oval:org.mitre.oval:def:16208', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16208'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169966'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0890?


Explain the CVE ID: What does the identifier CVE-2013-0891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0891.

Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a blob.


Provide references for further information: Can you share references or external links related to CVE-2013-0891?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:16356', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16356'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169685'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0891?


Explain the CVE ID: What does the identifier CVE-2013-0892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0892.

Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0892?

{'name': 'oval:org.mitre.oval:def:15586', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15586'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=166493'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=164958'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=165747'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=164946'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=165836'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=168710'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169295'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0892?


Explain the CVE ID: What does the identifier CVE-2013-0893 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0893.

Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media.


Provide references for further information: Can you share references or external links related to CVE-2013-0893?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'oval:org.mitre.oval:def:15682', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15682'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=168570'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0893?


Explain the CVE ID: What does the identifier CVE-2013-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0894.

Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.


Provide references for further information: Can you share references or external links related to CVE-2013-0894?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=168473'}, {'name': 'USN-1790-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1790-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=2c16bf2de07c68513072bf3cc96401d2c6291a3e'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.chromium.org/gitweb/?p=chromium/deps/ffmpeg.git%3Ba=commit%3Bh=e1e70d9bb9852b7d099379afc95531a632a20ba5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0894?


Explain the CVE ID: What does the identifier CVE-2013-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0895.

Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0895?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=167840'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0895?


Explain the CVE ID: What does the identifier CVE-2013-0896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0896.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0896?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'name': 'oval:org.mitre.oval:def:16656', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16656'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=166708'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0896?


Explain the CVE ID: What does the identifier CVE-2013-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0897.

Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document.


Provide references for further information: Can you share references or external links related to CVE-2013-0897?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=165537'}, {'name': 'oval:org.mitre.oval:def:16153', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16153'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0897?


Explain the CVE ID: What does the identifier CVE-2013-0898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0898.

Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0898?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=164643'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'name': 'oval:org.mitre.oval:def:16569', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16569'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0898?


Explain the CVE ID: What does the identifier CVE-2013-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0899.

Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0899?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=160480'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/chrome/trunk/deps/third_party/opus/src/opus_decoder.c?r1=173498&r2=173497&pathrev=173498'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/chrome?view=rev&revision=173498'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/11575026'}, {'name': 'oval:org.mitre.oval:def:16027', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16027'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://opus-codec.org/downloads/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0899?


Explain the CVE ID: What does the identifier CVE-2013-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0900.

Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0900?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=152442'}, {'name': 'oval:org.mitre.oval:def:16404', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404'}, {'name': 'DSA-2786', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2786'}, {'name': 'openSUSE-SU-2013:0454', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html'}, {'name': 'JVN#70739377', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN70739377/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0900?


Explain the CVE ID: What does the identifier CVE-2013-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0902.

Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0902?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=176882'}, {'name': 'oval:org.mitre.oval:def:16439', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16439'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0902?


Explain the CVE ID: What does the identifier CVE-2013-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0903.

Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of browser navigation.


Provide references for further information: Can you share references or external links related to CVE-2013-0903?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=176252'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'name': 'oval:org.mitre.oval:def:16661', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16661'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0903?


Explain the CVE ID: What does the identifier CVE-2013-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0904.

The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0904?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172331'}, {'name': 'oval:org.mitre.oval:def:16042', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16042'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172926'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0904?


Explain the CVE ID: What does the identifier CVE-2013-0905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0905.

Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG animation.


Provide references for further information: Can you share references or external links related to CVE-2013-0905?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'name': 'oval:org.mitre.oval:def:16495', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16495'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=168982'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0905?


Explain the CVE ID: What does the identifier CVE-2013-0906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0906.

The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0906?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=174895'}, {'name': 'oval:org.mitre.oval:def:16653', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16653'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0906?


Explain the CVE ID: What does the identifier CVE-2013-0907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0907.

Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media threads.


Provide references for further information: Can you share references or external links related to CVE-2013-0907?

{'name': 'oval:org.mitre.oval:def:16633', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16633'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=174150'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0907?


Explain the CVE ID: What does the identifier CVE-2013-0908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0908.

Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0908?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'name': 'oval:org.mitre.oval:def:16369', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16369'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=174059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0908?


Explain the CVE ID: What does the identifier CVE-2013-0909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0909.

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0909?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'name': 'oval:org.mitre.oval:def:16132', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16132'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=173906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0909?


Explain the CVE ID: What does the identifier CVE-2013-0910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0910.

Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.


Provide references for further information: Can you share references or external links related to CVE-2013-0910?

{'name': 'oval:org.mitre.oval:def:16574', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16574'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/chrome?view=rev&revision=180103'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/12086077'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172573'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0910?


Explain the CVE ID: What does the identifier CVE-2013-0911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0911.

Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases.


Provide references for further information: Can you share references or external links related to CVE-2013-0911?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172264'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html'}, {'name': 'oval:org.mitre.oval:def:16377', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16377'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0911?


Explain the CVE ID: What does the identifier CVE-2013-0912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0912.

WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion."


Provide references for further information: Can you share references or external links related to CVE-2013-0912?

{'tags': ['x_refsource_MISC'], 'url': 'http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/thezdi/statuses/309460019131346944'}, {'name': 'APPLE-SA-2013-03-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=180763'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5704'}, {'name': 'APPLE-SA-2013-04-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Apr/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5701'}, {'name': 'oval:org.mitre.oval:def:16274', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16274'}, {'tags': ['x_refsource_MISC'], 'url': 'http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0912?


Explain the CVE ID: What does the identifier CVE-2013-0913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0913.

Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.


Provide references for further information: Can you share references or external links related to CVE-2013-0913?

{'name': 'openSUSE-SU-2013:0847', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=920471'}, {'name': 'USN-1812-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1812-1'}, {'name': '[oss-security] 20130311 CVE-2013-0913 Linux kernel i915 integer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/03/11/6'}, {'name': 'USN-1809-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1809-1'}, {'name': '[oss-security] 20130314 Re: CVE-2013-0913 Linux kernel i915 integer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/03/14/22'}, {'name': 'USN-1814-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1814-1'}, {'name': '[oss-security] 20130313 Re: CVE-2013-0913 Linux kernel i915 integer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/03/13/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gerrit.chromium.org/gerrit/45118'}, {'name': 'RHSA-2013:0744', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0744.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html'}, {'name': 'USN-1813-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1813-1'}, {'name': '[linux-kernel] 20130311 [PATCH] drm/i915: bounds check execbuffer relocations', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2013/3/11/501'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.chromium.org/gitweb/?p=chromiumos/third_party/kernel.git%3Ba=commit%3Bh=c79efdf2b7f68f985922a8272d64269ecd490477'}, {'name': 'USN-1811-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1811-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium-os/issues/detail?id=39733'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0913?


Explain the CVE ID: What does the identifier CVE-2013-0914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0914.

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.


Provide references for further information: Can you share references or external links related to CVE-2013-0914?

{'name': 'USN-1796-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1796-1'}, {'name': 'openSUSE-SU-2013:1187', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/2ca39528c01a933f6689cd6505ce65bd6d68a530'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'name': 'USN-1797-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1797-1'}, {'name': 'USN-1788-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1788-1'}, {'name': 'RHSA-2013:1051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1051.html'}, {'name': 'USN-1793-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1793-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=920499'}, {'name': 'USN-1792-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1792-1'}, {'name': 'openSUSE-SU-2013:1971', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html'}, {'name': 'USN-1794-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1794-1'}, {'name': 'USN-1795-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1795-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ca39528c01a933f6689cd6505ce65bd6d68a530'}, {'name': '[oss-security] 20130311 CVE-2013-0914 Linux kernel sa_restorer information leak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/03/11/8'}, {'name': 'USN-1787-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1787-1'}, {'name': 'USN-1798-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1798-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0914?


Explain the CVE ID: What does the identifier CVE-2013-0915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0915.

The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow."


Provide references for further information: Can you share references or external links related to CVE-2013-0915?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=181083'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0915?


Explain the CVE ID: What does the identifier CVE-2013-0916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0916.

Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0916?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=172342'}, {'name': 'oval:org.mitre.oval:def:16665', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16665'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0916?


Explain the CVE ID: What does the identifier CVE-2013-0917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0917.

The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0917?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'name': 'oval:org.mitre.oval:def:15892', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15892'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=180909'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0917?


Explain the CVE ID: What does the identifier CVE-2013-0918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0918.

Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2013-0918?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=180555'}, {'name': 'oval:org.mitre.oval:def:16520', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16520'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0918?


Explain the CVE ID: What does the identifier CVE-2013-0919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0919.

Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window.


Provide references for further information: Can you share references or external links related to CVE-2013-0919?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=178760'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0919?


Explain the CVE ID: What does the identifier CVE-2013-0920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0920.

Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0920?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'name': 'oval:org.mitre.oval:def:16552', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=177410'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0920?


Explain the CVE ID: What does the identifier CVE-2013-0921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0921.

The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2013-0921?

{'name': 'oval:org.mitre.oval:def:16670', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=174943'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0921?


Explain the CVE ID: What does the identifier CVE-2013-0922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0922.

Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0922?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=174129'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'name': 'oval:org.mitre.oval:def:16215', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16215'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0922?


Explain the CVE ID: What does the identifier CVE-2013-0923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0923.

The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0923?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169972'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169981'}, {'name': 'oval:org.mitre.oval:def:16671', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16671'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0923?


Explain the CVE ID: What does the identifier CVE-2013-0924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0924.

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0924?

{'name': 'oval:org.mitre.oval:def:16674', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=169632'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0924?


Explain the CVE ID: What does the identifier CVE-2013-0925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0925.

Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0925?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=168442'}, {'name': 'oval:org.mitre.oval:def:16363', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0925?


Explain the CVE ID: What does the identifier CVE-2013-0926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0926.

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2013-0926?

{'name': 'oval:org.mitre.oval:def:16601', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16601'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=112325'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/chrome?view=rev&revision=176856'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5785'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://chromiumcodereview.appspot.com/11884025'}, {'name': '54886', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/54886'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5934'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.chromium.org/gitweb/?p=chromium/src.git%3Ba=commit%3Bh=52a30db57ecec68bb3b25fdc3de5e9bee7b80ed7'}, {'name': 'APPLE-SA-2013-06-04-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html'}, {'name': 'APPLE-SA-2013-09-18-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0926?


Explain the CVE ID: What does the identifier CVE-2013-0927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0927.

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.


Provide references for further information: Can you share references or external links related to CVE-2013-0927?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2013/04/chrome-os-stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=189250'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=commit%3Bh=fb5a664def6cd34bf7295489ea73e1d989bdd6d0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0927?


Explain the CVE ID: What does the identifier CVE-2013-0928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0928.

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.


Provide references for further information: Can you share references or external links related to CVE-2013-0928?

{'name': '20130118 ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-01/0078.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-13-033/'}, {'name': '57472', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57472'}, {'name': '34756', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/34756'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0928?


Explain the CVE ID: What does the identifier CVE-2013-0929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0929.

Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command.


Provide references for further information: Can you share references or external links related to CVE-2013-0929?

{'name': '20130118 ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-01/0078.html'}, {'name': '57472', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0929?


Explain the CVE ID: What does the identifier CVE-2013-0930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0930.

Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name.


Provide references for further information: Can you share references or external links related to CVE-2013-0930?

{'name': '20130128 ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-01/0115.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0930?


Explain the CVE ID: What does the identifier CVE-2013-0931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0931.

EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.


Provide references for further information: Can you share references or external links related to CVE-2013-0931?

{'name': '20130228 ESA-2013-012: RSA Authentication Agent 7.1.1 for Microsoft Windows Access Control Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-03/0001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0931?


Explain the CVE ID: What does the identifier CVE-2013-0932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0932.

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0932?

{'name': '20130506 ESA-2013-015: RSA Archer GRC Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0023.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0932?


Explain the CVE ID: What does the identifier CVE-2013-0933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0933.

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0933?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0933?


Explain the CVE ID: What does the identifier CVE-2013-0934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0934.

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0934?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0934?


Explain the CVE ID: What does the identifier CVE-2013-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0935.

EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0935?

{'name': '20130326 ESA-2013-016: EMC Smarts Network Configuration Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-03/0135.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0935?


Explain the CVE ID: What does the identifier CVE-2013-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0936.

Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0936?

{'name': '20130327 ESA-2013-018: EMC Smarts Product - Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-03/0152.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0936?


Explain the CVE ID: What does the identifier CVE-2013-0937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0937.

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0937?

{'name': '20130509 ESA-2013-021: EMC Documentum Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0037.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0937?


Explain the CVE ID: What does the identifier CVE-2013-0938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0938.

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0938?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0938?


Explain the CVE ID: What does the identifier CVE-2013-0939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0939.

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting" issue.


Provide references for further information: Can you share references or external links related to CVE-2013-0939?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0939?


Explain the CVE ID: What does the identifier CVE-2013-0940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0940.

The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0940?

{'name': '20130502 ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0940?


Explain the CVE ID: What does the identifier CVE-2013-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0941.

EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.


Provide references for further information: Can you share references or external links related to CVE-2013-0941?

{'name': '20130516 ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0064.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0941?


Explain the CVE ID: What does the identifier CVE-2013-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0942.

Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0942?

{'name': '20130510 ESA-2013-031: RSA Authentication Agent Cross-Site Scripting (XSS) Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0942?


Explain the CVE ID: What does the identifier CVE-2013-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0943.

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin.


Provide references for further information: Can you share references or external links related to CVE-2013-0943?

{'name': '20130729 ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-07/0193.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0943?


Explain the CVE ID: What does the identifier CVE-2013-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0944.

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0944?

{'name': '20130502 ESA-2013-034: EMC Avamar Improper Authorization vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0012.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0944?


Explain the CVE ID: What does the identifier CVE-2013-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0945.

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.


Provide references for further information: Can you share references or external links related to CVE-2013-0945?

{'name': '20130502 ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0014.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0945?


Explain the CVE ID: What does the identifier CVE-2013-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0946.

Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.


Provide references for further information: Can you share references or external links related to CVE-2013-0946?

{'name': '59794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59794'}, {'name': '42719', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/42719/'}, {'name': '20130509 ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0035.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0946?


Explain the CVE ID: What does the identifier CVE-2013-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0947.

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.


Provide references for further information: Can you share references or external links related to CVE-2013-0947?

{'name': '20130528 ESA-2013-040: RSA Authentication Manager 8.0 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-05/0115.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0947?


Explain the CVE ID: What does the identifier CVE-2013-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0948.

WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.


Provide references for further information: Can you share references or external links related to CVE-2013-0948?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5642'}, {'name': 'APPLE-SA-2013-03-14-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Mar/msg00003.html'}, {'name': 'APPLE-SA-2013-01-28-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0948?


Explain the CVE ID: What does the identifier CVE-2013-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0949.


Provide references for further information: Can you share references or external links related to CVE-2013-0949?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0949?


Explain the CVE ID: What does the identifier CVE-2013-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0950.


Provide references for further information: Can you share references or external links related to CVE-2013-0950?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0950?


Explain the CVE ID: What does the identifier CVE-2013-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0951.


Provide references for further information: Can you share references or external links related to CVE-2013-0951?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0951?


Explain the CVE ID: What does the identifier CVE-2013-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0952.


Provide references for further information: Can you share references or external links related to CVE-2013-0952?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0952?


Explain the CVE ID: What does the identifier CVE-2013-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0953.


Provide references for further information: Can you share references or external links related to CVE-2013-0953?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0953?


Explain the CVE ID: What does the identifier CVE-2013-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0954.


Provide references for further information: Can you share references or external links related to CVE-2013-0954?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0954?


Explain the CVE ID: What does the identifier CVE-2013-0955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0955.


Provide references for further information: Can you share references or external links related to CVE-2013-0955?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0955?


Explain the CVE ID: What does the identifier CVE-2013-0956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0956.


Provide references for further information: Can you share references or external links related to CVE-2013-0956?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0956?


Explain the CVE ID: What does the identifier CVE-2013-0957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0957.

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox.


Provide references for further information: Can you share references or external links related to CVE-2013-0957?

{'name': '1029054', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5934'}, {'name': 'APPLE-SA-2013-09-18-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0957?


Explain the CVE ID: What does the identifier CVE-2013-0958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0958.


Provide references for further information: Can you share references or external links related to CVE-2013-0958?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0958?


Explain the CVE ID: What does the identifier CVE-2013-0959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0959.


Provide references for further information: Can you share references or external links related to CVE-2013-0959?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0959?


Explain the CVE ID: What does the identifier CVE-2013-0960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0960.

WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0961.


Provide references for further information: Can you share references or external links related to CVE-2013-0960?

{'name': 'APPLE-SA-2013-03-14-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Mar/msg00003.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0960?


Explain the CVE ID: What does the identifier CVE-2013-0961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0961.

WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0960.


Provide references for further information: Can you share references or external links related to CVE-2013-0961?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0961?


Explain the CVE ID: What does the identifier CVE-2013-0962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0962.

Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 6.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted content that is not properly handled during a copy-and-paste operation.


Provide references for further information: Can you share references or external links related to CVE-2013-0962?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0962?


Explain the CVE ID: What does the identifier CVE-2013-0963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0963.

Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID certificates, which might allow physically proximate attackers to bypass authentication by leveraging an incorrect assignment of an empty string value to an AppleID.


Provide references for further information: Can you share references or external links related to CVE-2013-0963?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5642'}, {'name': 'APPLE-SA-2013-03-14-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html'}, {'name': 'APPLE-SA-2013-01-28-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0963?


Explain the CVE ID: What does the identifier CVE-2013-0964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0964.

The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.


Provide references for further information: Can you share references or external links related to CVE-2013-0964?

{'name': 'APPLE-SA-2013-01-28-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5642'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5643'}, {'name': '89659', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89659'}, {'name': 'APPLE-SA-2013-01-28-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html'}, {'name': '57595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57595'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0964?


Explain the CVE ID: What does the identifier CVE-2013-0965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0965.


Provide references for further information: Can you share references or external links related to CVE-2013-0965?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0965?


Explain the CVE ID: What does the identifier CVE-2013-0966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0966.

The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.


Provide references for further information: Can you share references or external links related to CVE-2013-0966?

{'name': 'APPLE-SA-2013-03-14-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0966?


Explain the CVE ID: What does the identifier CVE-2013-0967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0967.

CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2013-0967?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0967?


Explain the CVE ID: What does the identifier CVE-2013-0968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0968.


Provide references for further information: Can you share references or external links related to CVE-2013-0968?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5642'}, {'name': 'APPLE-SA-2013-01-28-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0968?


Explain the CVE ID: What does the identifier CVE-2013-0969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0969.

Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.


Provide references for further information: Can you share references or external links related to CVE-2013-0969?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0969?


Explain the CVE ID: What does the identifier CVE-2013-0970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0970.

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0970?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0970?


Explain the CVE ID: What does the identifier CVE-2013-0971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0971.

Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted ink annotations in a PDF document.


Provide references for further information: Can you share references or external links related to CVE-2013-0971?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0971?


Explain the CVE ID: What does the identifier CVE-2013-0972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0972.


Provide references for further information: Can you share references or external links related to CVE-2013-0972?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0972?


Explain the CVE ID: What does the identifier CVE-2013-0973 mean in the context of cybersecurity?