# CVEs published 2013-03-04

18 CVEs were published on March 4, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0902](https://cve.now/CVE-2013-0902.md): Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a den (no CVSS)
- [CVE-2013-0903](https://cve.now/CVE-2013-0903.md): Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have uns (no CVSS)
- [CVE-2013-0904](https://cve.now/CVE-2013-0904.md): The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) (no CVSS)
- [CVE-2013-0905](https://cve.now/CVE-2013-0905.md): Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have uns (no CVSS)
- [CVE-2013-0906](https://cve.now/CVE-2013-0906.md): The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) (no CVSS)
- [CVE-2013-0907](https://cve.now/CVE-2013-0907.md): Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS)
- [CVE-2013-0908](https://cve.now/CVE-2013-0908.md): Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors (no CVSS)
- [CVE-2013-0909](https://cve.now/CVE-2013-0909.md): The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified v (no CVSS)
- [CVE-2013-0910](https://cve.now/CVE-2013-0910.md): Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during author (no CVSS)
- [CVE-2013-0911](https://cve.now/CVE-2013-0911.md): Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors re (no CVSS)
- [CVE-2011-4355](https://cve.now/CVE-2011-4355.md): GNU Project Debugger (GDB) before 7.5, when .debug\_gdb\_scripts is defined, automatically loads certain files from the current working direct (no CVSS)
- [CVE-2012-3411](https://cve.now/CVE-2012-3411.md): Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote (no CVSS)
- [CVE-2013-0198](https://cve.now/CVE-2013-0198.md): Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote (no CVSS)
- [CVE-2013-0288](https://cve.now/CVE-2013-0288.md): nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and (no CVSS)
- [CVE-2013-0292](https://cve.now/CVE-2013-0292.md): The dbus\_g\_proxy\_manager\_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged (no CVSS)
- [CVE-2013-1775](https://cve.now/CVE-2013-1775.md): sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time rest (no CVSS)
- [CVE-2013-0809](https://cve.now/CVE-2013-0809.md): Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 U (no CVSS)
- [CVE-2013-1493](https://cve.now/CVE-2013-1493.md): The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Upd (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.