CVE-2013-0889: Google Chrome

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.

Affected products

• Google Chrome: before 25.0.1364.97 (fixed in 25.0.1364.97); before 25.0.1364.99 (fixed in 25.0.1364.99)
• Opensuse Opensuse: version 12.1 only; version 12.2 only

Published 2013-02-23. Last modified 2026-06-16.