Description
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Published: 2013-07-10
Score: 5.0 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2724-1 chromium-browser security update
Debian DSA Debian DSA DSA-2779-1 libxml2 security update
EUVD EUVD EUVD-2013-2816 parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Ubuntu USN Ubuntu USN USN-1904-1 libxml2 vulnerabilities
History

No history.

Subscriptions

Google Chrome
Redhat Enterprise Linux
Xmlsoft Libxml2
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2024-08-06T15:52:20.586Z

Reserved: 2013-04-11T00:00:00.000Z

Link: CVE-2013-2877

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-07-10T10:55:02.260

Modified: 2026-04-29T01:13:23.040

Link: CVE-2013-2877

cve-icon Redhat

Severity : Low

Publid Date: 2013-07-09T00:00:00Z

Links: CVE-2013-2877 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses