CVE-2013-0900

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-23 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Affected products

Debian Linux: 6.0
Google Chrome: before 25.0.1364.97; before 25.0.1364.99 — fixed in 25.0.1364.97, 25.0.1364.99

How to fix

Upgrade to a fixed version: Google Chrome 25.0.1364.97, 25.0.1364.99. Check the vendor advisory for mitigations.

References

http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
http://jvn.jp/en/jp/JVN70739377/index.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
http://www.debian.org/security/2013/dsa-2786
https://code.google.com/p/chromium/issues/detail?id=152442
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404
http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
http://jvn.jp/en/jp/JVN70739377/index.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
http://www.debian.org/security/2013/dsa-2786
https://code.google.com/p/chromium/issues/detail?id=152442
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404

Get alerted when CVE-2013-0900 or the next vulnerability affects your stack