CVE-2013-2924

Publication date 2 October 2013

Last updated 24 July 2024

Ubuntu priority

Description

Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	13.10 saucy	Fixed 30.0.1599.114-0ubuntu0.13.10.2
	13.04 raring	Fixed 30.0.1599.114-0ubuntu0.13.04.2
	12.10 quantal	Fixed 30.0.1599.114-0ubuntu0.12.10.2
	12.04 LTS precise	Fixed 30.0.1599.114-0ubuntu0.12.04.3
	10.04 LTS lucid	Ignored end of life
icu	13.10 saucy	Fixed 4.8.1.1-12ubuntu2
	13.04 raring	Fixed 4.8.1.1-12ubuntu0.1
	12.10 quantal	Fixed 4.8.1.1-8ubuntu0.1
	12.04 LTS precise	Fixed 4.8.1.1-3ubuntu0.1
	10.04 LTS lucid	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
chromium-browser	Upstream: https://src.chromium.org/viewvc/chrome?revision=219151&view=revision
icu	Upstream: https://ssl.icu-project.org/trac/changeset/34076

References

Related Ubuntu Security Notices (USN)

USN-1989-1
ICU vulnerabilities
15 October 2013