{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Google Chrome versions ant\u00e9rieures \u00e0 25.0.1364.97 pour Windows et Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Google Chrome versions ant\u00e9rieures \u00e0 25.0.1364.99 pour Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-0880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0880"
    },
    {
      "name": "CVE-2013-0887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0887"
    },
    {
      "name": "CVE-2013-0883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0883"
    },
    {
      "name": "CVE-2013-0886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0886"
    },
    {
      "name": "CVE-2013-0895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0895"
    },
    {
      "name": "CVE-2013-0884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0884"
    },
    {
      "name": "CVE-2013-0894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0894"
    },
    {
      "name": "CVE-2013-0890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0890"
    },
    {
      "name": "CVE-2013-0893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0893"
    },
    {
      "name": "CVE-2013-0892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0892"
    },
    {
      "name": "CVE-2013-0885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0885"
    },
    {
      "name": "CVE-2013-0900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0900"
    },
    {
      "name": "CVE-2013-0879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0879"
    },
    {
      "name": "CVE-2013-0896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0896"
    },
    {
      "name": "CVE-2013-0897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0897"
    },
    {
      "name": "CVE-2013-0898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0898"
    },
    {
      "name": "CVE-2013-0899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0899"
    },
    {
      "name": "CVE-2013-0882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0882"
    },
    {
      "name": "CVE-2013-0888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0888"
    },
    {
      "name": "CVE-2013-0891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0891"
    },
    {
      "name": "CVE-2013-0881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0881"
    },
    {
      "name": "CVE-2013-0889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0889"
    }
  ],
  "initial_release_date": "2013-02-22T00:00:00",
  "last_revision_date": "2013-02-22T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-148",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-02-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eGoogle Chrome\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement\nde la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Google du 21 f\u00e9vrier 2013",
      "url": "http://googlechromereleases.blogspot.fr/2013/02/stable-channel-update_21.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Solaris 11.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Solaris 10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Solaris 9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-5718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5718"
    },
    {
      "name": "CVE-2013-1960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1960"
    },
    {
      "name": "CVE-2013-4123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4123"
    },
    {
      "name": "CVE-2013-5745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5745"
    },
    {
      "name": "CVE-2013-4231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4231"
    },
    {
      "name": "CVE-2006-4810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4810"
    },
    {
      "name": "CVE-2013-4164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4164"
    },
    {
      "name": "CVE-2012-6139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6139"
    },
    {
      "name": "CVE-2013-4408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4408"
    },
    {
      "name": "CVE-2014-0397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0397"
    },
    {
      "name": "CVE-2013-6462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6462"
    },
    {
      "name": "CVE-2013-1418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1418"
    },
    {
      "name": "CVE-2011-3970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3970"
    },
    {
      "name": "CVE-2012-2871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2871"
    },
    {
      "name": "CVE-2012-6150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6150"
    },
    {
      "name": "CVE-2013-5717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5717"
    },
    {
      "name": "CVE-2013-6340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6340"
    },
    {
      "name": "CVE-2012-2870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2870"
    },
    {
      "name": "CVE-2013-6337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6337"
    },
    {
      "name": "CVE-2013-0900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0900"
    },
    {
      "name": "CVE-2013-6339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6339"
    },
    {
      "name": "CVE-2013-4363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4363"
    },
    {
      "name": "CVE-2013-5721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5721"
    },
    {
      "name": "CVE-2007-6750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6750"
    },
    {
      "name": "CVE-2008-0386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-0386"
    },
    {
      "name": "CVE-2012-4504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4504"
    },
    {
      "name": "CVE-2012-2893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2893"
    },
    {
      "name": "CVE-2012-4505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4505"
    },
    {
      "name": "CVE-2013-1961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1961"
    },
    {
      "name": "CVE-2013-4287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4287"
    },
    {
      "name": "CVE-2009-0179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0179"
    },
    {
      "name": "CVE-2013-6338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6338"
    },
    {
      "name": "CVE-2013-6336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6336"
    },
    {
      "name": "CVE-2013-4232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4232"
    },
    {
      "name": "CVE-2013-4124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4124"
    },
    {
      "name": "CVE-2013-7112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7112"
    },
    {
      "name": "CVE-2013-2561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2561"
    },
    {
      "name": "CVE-2014-0591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0591"
    },
    {
      "name": "CVE-2013-5719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5719"
    },
    {
      "name": "CVE-2013-7114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7114"
    },
    {
      "name": "CVE-2013-1417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1417"
    },
    {
      "name": "CVE-2012-4564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4564"
    },
    {
      "name": "CVE-2013-5722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5722"
    },
    {
      "name": "CVE-2011-1202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1202"
    },
    {
      "name": "CVE-2012-0870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0870"
    },
    {
      "name": "CVE-2013-5720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5720"
    },
    {
      "name": "CVE-2012-2825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2825"
    },
    {
      "name": "CVE-2013-4475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4475"
    }
  ],
  "initial_release_date": "2014-03-10T00:00:00",
  "last_revision_date": "2014-03-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-112",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-03-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Solaris\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nune ex\u00e9cution de code arbitraire et un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Solaris",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 25 f\u00e9vrier 2014",
      "url": "http://www.oracle.com/technetwork/topics/security/thirdparty-patch-map-1482893.html"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0107C81D-3DF7-48EB-9907-A69D933C1A55",
              "versionEndExcluding": "25.0.1364.97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4443B52-0815-45EB-A1F8-BF045F0ED921",
              "versionEndExcluding": "25.0.1364.99",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Condici\u00f3n de carrera en la funcionalidad   \"International Components for Unicode (ICU)\" de Google Chrome antes v25.0.1364.97 en Windows y Linux, y antes v25.0.1364.99 en Mac OS X, permite a atacantes remotos provocar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado a trav\u00e9s de vectores desconocidos."
    }
  ],
  "id": "CVE-2013-0900",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-02-23T21:55:02.047",
  "references": [
    {
      "source": "chrome-cve-admin@google.com",
      "url": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html"
    },
    {
      "source": "chrome-cve-admin@google.com",
      "url": "http://jvn.jp/en/jp/JVN70739377/index.html"
    },
    {
      "source": "chrome-cve-admin@google.com",
      "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html"
    },
    {
      "source": "chrome-cve-admin@google.com",
      "url": "http://www.debian.org/security/2013/dsa-2786"
    },
    {
      "source": "chrome-cve-admin@google.com",
      "url": "https://code.google.com/p/chromium/issues/detail?id=152442"
    },
    {
      "source": "chrome-cve-admin@google.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN70739377/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2013/dsa-2786"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://code.google.com/p/chromium/issues/detail?id=152442"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404"
    }
  ],
  "sourceIdentifier": "chrome-cve-admin@google.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2013-0900"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-362"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-02-23T21:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
  "id": "GHSA-7q82-w593-4rh5",
  "modified": "2022-05-17T00:56:49Z",
  "published": "2022-05-17T00:56:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0900"
    },
    {
      "type": "WEB",
      "url": "https://code.google.com/p/chromium/issues/detail?id=152442"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404"
    },
    {
      "type": "WEB",
      "url": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/en/jp/JVN70739377/index.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2013/dsa-2786"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2013-0900",
    "description": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
    "id": "GSD-2013-0900",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-0900.html",
      "https://www.debian.org/security/2013/dsa-2786",
      "https://advisories.mageia.org/CVE-2013-0900.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-0900"
      ],
      "details": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
      "id": "GSD-2013-0900",
      "modified": "2023-12-13T01:22:15.512176Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@google.com",
        "ID": "CVE-2013-0900",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html",
            "refsource": "CONFIRM",
            "url": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html"
          },
          {
            "name": "https://code.google.com/p/chromium/issues/detail?id=152442",
            "refsource": "CONFIRM",
            "url": "https://code.google.com/p/chromium/issues/detail?id=152442"
          },
          {
            "name": "oval:org.mitre.oval:def:16404",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404"
          },
          {
            "name": "DSA-2786",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2013/dsa-2786"
          },
          {
            "name": "openSUSE-SU-2013:0454",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html"
          },
          {
            "name": "JVN#70739377",
            "refsource": "JVN",
            "url": "http://jvn.jp/en/jp/JVN70739377/index.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "25.0.1364.97",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "25.0.1364.99",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-0900"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-362"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html",
              "refsource": "CONFIRM",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html"
            },
            {
              "name": "https://code.google.com/p/chromium/issues/detail?id=152442",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Issue Tracking",
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://code.google.com/p/chromium/issues/detail?id=152442"
            },
            {
              "name": "openSUSE-SU-2013:0454",
              "refsource": "SUSE",
              "tags": [
                "Broken Link",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html"
            },
            {
              "name": "JVN#70739377",
              "refsource": "JVN",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://jvn.jp/en/jp/JVN70739377/index.html"
            },
            {
              "name": "DSA-2786",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2013/dsa-2786"
            },
            {
              "name": "oval:org.mitre.oval:def:16404",
              "refsource": "OVAL",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2022-11-18T20:17Z",
      "publishedDate": "2013-02-23T21:55Z"
    }
  }
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-001665.html",
  "dc:date": "2015-10-28T10:05+09:00",
  "dcterms:issued": "2013-10-30T16:08+09:00",
  "dcterms:modified": "2015-10-28T10:05+09:00",
  "description": "Multiple products that use International Components for Unicode (ICU) contain a denial-of-service (DoS) vulnerability.\r\n\r\nInternational Components for Unicode (ICU) is a library for handling Unicode strings. A C version, ICU4C and a Java version ICU4J are available. Multiple products that use ICU4C contain a denial-of-service vulnerability due to a race condition.\r\n\r\nICU released ICU4C version 50.1.1 that addresses this vulnerability in December, 2012.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-001665.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:multiple_vendors",
    "@product": "(Multiple Products)",
    "@vendor": "(Multiple Venders)",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-001665",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN70739377/index.html",
      "@id": "JVN#70739377",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0900",
      "@id": "CVE-2013-0900",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0900",
      "@id": "CVE-2013-0900",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-362",
      "@title": "Race Condition(CWE-362)"
    }
  ],
  "title": "Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)"
}