peter bassill · operator
$ cve CVE-2013-6627 JSON

CVE-2013-6627 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 5.3% (pctl 92)

Patch early

A public exploit exists.

Description

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS5.34% — more likely to be exploited than 92% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2013-11-13
Last modified2026-06-17

Affected (1)

VendorProduct
googlechrome

Public exploits

SourceTitleDate
exploit-dbGoogle Chrome < 31.0.1650.48 - HTTP 1xx base::String­Tokenizer­T<...>::Quick­Get­Next Out-of-Bounds Read2016-12-19

References

→ the Explorer  ·  watch your stack  ·  NVD