CVE-2013-7324

Опубликовано: 17 фев. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration.

Ссылки

http://www.openwall.com/lists/oss-security/2014/02/10/13
Mailing List
Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-7324.html
Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/10/08/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/10/13
Mailing List
Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-7324.html
Third Party Advisory
https://www.openwall.com/lists/oss-security/2013/10/08/4
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия от 2.0.0 (исключая) до 2.26.4 (включая)

EPSS

Процентиль: 73%

0.01431

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2013-7324

CVSS3: 5.3

ubuntu

больше 6 лет назад

GHSA-x7cx-g6gg-jhc7

github

больше 4 лет назад

ALT-PU-2020-1481

CVSS3: 9.8

altlinux