CVE-2013-2877
N/A
Published: July 10, 2013 at 10:00 AM UTC
Updated: June 16, 2026 at 11:54 PM UTC
2 products affected across 2 vendorsChromeLIBXML2
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 28.0.1500.7028.0.1500.028.0.1500.1028.0.1500.1128.0.1500.1228.0.1500.1328.0.1500.1428.0.1500.1528.0.1500.1628.0.1500.1728.0.1500.1828.0.1500.1928.0.1500.228.0.1500.2028.0.1500.2128.0.1500.2228.0.1500.2328.0.1500.2428.0.1500.2528.0.1500.2628.0.1500.2728.0.1500.2828.0.1500.2928.0.1500.328.0.1500.3128.0.1500.3228.0.1500.3328.0.1500.3428.0.1500.3528.0.1500.3628.0.1500.3728.0.1500.3828.0.1500.3928.0.1500.428.0.1500.4028.0.1500.4128.0.1500.4228.0.1500.4328.0.1500.4428.0.1500.4528.0.1500.4628.0.1500.4728.0.1500.4828.0.1500.4928.0.1500.528.0.1500.5028.0.1500.5128.0.1500.5228.0.1500.5328.0.1500.5428.0.1500.5628.0.1500.5828.0.1500.5928.0.1500.628.0.1500.6028.0.1500.6128.0.1500.6228.0.1500.6328.0.1500.6428.0.1500.6628.0.1500.6828.0.1500.828.0.1500.9
v ≤ 2.9.01.7.01.7.11.7.21.7.31.7.41.8.01.8.11.8.101.8.131.8.141.8.161.8.21.8.31.8.41.8.51.8.61.8.71.8.92.0.02.1.02.1.12.2.02.2.0 beta2.2.12.2.102.2.112.2.22.2.32.2.42.2.52.2.62.2.72.2.82.2.92.3.02.3.12.3.102.3.112.3.122.3.132.3.142.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.92.4.12.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.172.4.182.4.192.4.22.4.202.4.212.4.222.4.232.4.242.4.252.4.262.4.272.4.282.4.292.4.32.4.302.4.42.4.52.4.62.4.72.4.82.4.92.5.02.5.102.5.112.5.42.5.72.5.82.6.02.6.12.6.112.6.122.6.132.6.142.6.162.6.172.6.182.6.22.6.202.6.212.6.222.6.232.6.242.6.252.6.262.6.272.6.282.6.292.6.32.6.302.6.312.6.322.6.42.6.52.6.62.6.72.6.82.6.92.7.02.7.12.7.22.7.32.7.42.7.52.7.62.7.72.7.82.8.0rc1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (18)
x_refsource_CONFIRM
Source: [email protected]
http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-07/msg00063.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-07/msg00077.htmlMailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/fulldisclosure/2014/Dec/23Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card