CVE-2013-2903

CVE-2013-2903 describes a use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function within Blink, affecting Google Chrome versions prior to 29.0.1547.57, as well as Debian-based Chrome installations. This flaw allows remote attackers to trigger a denial of service or potentially other unspecified impacts by manipulating AUDIO or VIDEO elements across different HTML documents. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication (AV:N/AC:L/Au:N) and potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). The attack complexity is low, making it relatively easy to exploit. There is no evidence of active exploitation (not in KEV), and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While there's limited community discussion and media coverage, its FAUCET Risk Score of 53/100 suggests a moderate overall risk.