CVE-2013-2876: debian debian_linux
Vulnerability summary
CVE-2013-2876 is a medium (CVSS 5.0) vulnerability in debian debian_linux. EPSS estimates a 1.12% chance of exploitation in the next 30 days, higher than 66.1% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 10-07-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.12%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.12% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- debian_linuxEOL7.0
Google1 product
- chromeEOL≤ 28.0.1500.70 | 28.0.1500.0 | 28.0.1500.2 | 28.0.1500.3 | 28.0.1500.4 | 28.0.1500.5 | 28.0.1500.6 | 28.0.1500.8 | 28.0.1500.9 | 28.0.1500.10 | 28.0.1500.11 | 28.0.1500.12 | 28.0.1500.13 | 28.0.1500.14 | 28.0.1500.15 | 28.0.1500.16 | 28.0.1500.17 | 28.0.1500.18 | 28.0.1500.19 | 28.0.1500.20 | 28.0.1500.21 | 28.0.1500.22 | 28.0.1500.23 | 28.0.1500.24 | 28.0.1500.25 | 28.0.1500.26 | 28.0.1500.27 | 28.0.1500.28 | 28.0.1500.29 | 28.0.1500.31 | 28.0.1500.32 | 28.0.1500.33 | 28.0.1500.34 | 28.0.1500.35 | 28.0.1500.36 | 28.0.1500.37 | 28.0.1500.38 | 28.0.1500.39 | 28.0.1500.40 | 28.0.1500.41 | 28.0.1500.42 | 28.0.1500.43 | 28.0.1500.44 | 28.0.1500.45 | 28.0.1500.46 | 28.0.1500.47 | 28.0.1500.48 | 28.0.1500.49 | 28.0.1500.50 | 28.0.1500.51 | 28.0.1500.52 | 28.0.1500.53 | 28.0.1500.54 | 28.0.1500.56 | 28.0.1500.58 | 28.0.1500.59 | 28.0.1500.60 | 28.0.1500.61 | 28.0.1500.62 | 28.0.1500.63 | 28.0.1500.64 | 28.0.1500.66 | 28.0.1500.68
2 vendors · 2 products
References
5 links- code.google.com/p/chromium/issues/detail?id=229504X Refsource CONFIRM
- git.chromium.org/gitwebX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17350VDB EntrySignatureX Refsource OVAL
- googlechromereleases.blogspot.com/2013/07/stable-channel-update.htmlX Refsource CONFIRM