CVE

Id
66574  
CVE No.
CVE-2013-6627  
Status
Candidate  
Description
net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645759 66574 CVE-2013-6627 EXPLOIT-DB:40944  View
645760 66574 CVE-2013-6627 URL:https://www.exploit-db.com/exploits/40944/  View
645761 66574 CVE-2013-6627 FULLDISC:20161219 CVE-2013-6627: Chrome Chrome HTTP 1xx base::StringTokenizerT<...>::QuickGetNext OOBR  View
645762 66574 CVE-2013-6627 URL:http://seclists.org/fulldisclosure/2016/Dec/65  View
645763 66574 CVE-2013-6627 MISC:http://blog.skylined.nl/20161219001.html  View
645764 66574 CVE-2013-6627 MISC:http://packetstormsecurity.com/files/140209/Chrome-HTTP-1xx-Out-Of-Bounds-Read.html  View
645765 66574 CVE-2013-6627 CONFIRM:http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html  View
645766 66574 CVE-2013-6627 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=299892  View
645767 66574 CVE-2013-6627 CONFIRM:https://src.chromium.org/viewvc/chrome?revision=226539&view=revision  View
645768 66574 CVE-2013-6627 DEBIAN:DSA-2799  View
645769 66574 CVE-2013-6627 URL:http://www.debian.org/security/2013/dsa-2799  View
645770 66574 CVE-2013-6627 SUSE:openSUSE-SU-2013:1776  View
645771 66574 CVE-2013-6627 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html  View
645772 66574 CVE-2013-6627 SUSE:openSUSE-SU-2013:1777  View
645773 66574 CVE-2013-6627 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html  View
645774 66574 CVE-2013-6627 SUSE:openSUSE-SU-2013:1861  View
645775 66574 CVE-2013-6627 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html  View
645776 66574 CVE-2013-6627 SUSE:openSUSE-SU-2014:0065  View
645777 66574 CVE-2013-6627 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
645778 66574 CVE-2013-6627 OVAL:oval:org.mitre.oval:def:19113  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23598 JVNDB-2013-005173 Google Chrome における整数オーバーフローの脆弱性 Google Chrome には、整数オーバーフローの脆弱性が存在します。 CVE-2013-6632 66574 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005173.html  View