CVEvulnerability

CVE-2013-2877

5.0 MEDIUM Published 2013-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

Affected configurations

• google chrome (<= 28.0.1500.70) • google chrome 28.0.1500.0 • google chrome 28.0.1500.2 • google chrome 28.0.1500.3 • google chrome 28.0.1500.4 • google chrome 28.0.1500.5 • google chrome 28.0.1500.6 • google chrome 28.0.1500.8 • google chrome 28.0.1500.9 • google chrome 28.0.1500.10 • google chrome 28.0.1500.11 • google chrome 28.0.1500.12 • google chrome 28.0.1500.13 • google chrome 28.0.1500.14 • google chrome 28.0.1500.15 • google chrome 28.0.1500.16 • google chrome 28.0.1500.17 • google chrome 28.0.1500.18 • google chrome 28.0.1500.19 • google chrome 28.0.1500.20 • google chrome 28.0.1500.21 • google chrome 28.0.1500.22 • google chrome 28.0.1500.23 • google chrome 28.0.1500.24 • google chrome 28.0.1500.25 • google chrome 28.0.1500.26 • google chrome 28.0.1500.27 • google chrome 28.0.1500.28 • google chrome 28.0.1500.29 • google chrome 28.0.1500.31 • google chrome 28.0.1500.32 • google chrome 28.0.1500.33 • google chrome 28.0.1500.34 • google chrome 28.0.1500.35 • google chrome 28.0.1500.36 • google chrome 28.0.1500.37 • google chrome 28.0.1500.38 • google chrome 28.0.1500.39 • google chrome 28.0.1500.40 • google chrome 28.0.1500.41 • google chrome 28.0.1500.42 • google chrome 28.0.1500.43 • google chrome 28.0.1500.44 • google chrome 28.0.1500.45 • google chrome 28.0.1500.46 • google chrome 28.0.1500.47 • google chrome 28.0.1500.48 • google chrome 28.0.1500.49 • google chrome 28.0.1500.50 • google chrome 28.0.1500.51 • google chrome 28.0.1500.52 • google chrome 28.0.1500.53 • google chrome 28.0.1500.54 • google chrome 28.0.1500.56 • google chrome 28.0.1500.58 • google chrome 28.0.1500.59 • google chrome 28.0.1500.60 • google chrome 28.0.1500.61 • google chrome 28.0.1500.62 • google chrome 28.0.1500.63 … and 128 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References