Lucene search

[email protected]NVD:CVE-2013-6623

HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-6623

2013-11-1315:55:04

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

Confidence

High

EPSS

0.024

Percentile

89.9%

JSON

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.

Affected configurations

Nvd

Node

googlechromeRange≤31.0.1650.47

googlechromeMatch31.0.1650.0

googlechromeMatch31.0.1650.2

googlechromeMatch31.0.1650.3

googlechromeMatch31.0.1650.4

googlechromeMatch31.0.1650.5

googlechromeMatch31.0.1650.6

googlechromeMatch31.0.1650.7

googlechromeMatch31.0.1650.8

googlechromeMatch31.0.1650.9

googlechromeMatch31.0.1650.10

googlechromeMatch31.0.1650.11

googlechromeMatch31.0.1650.12

googlechromeMatch31.0.1650.13

googlechromeMatch31.0.1650.14

googlechromeMatch31.0.1650.15

googlechromeMatch31.0.1650.16

googlechromeMatch31.0.1650.17

googlechromeMatch31.0.1650.18

googlechromeMatch31.0.1650.19

googlechromeMatch31.0.1650.20

googlechromeMatch31.0.1650.22

googlechromeMatch31.0.1650.23

googlechromeMatch31.0.1650.25

googlechromeMatch31.0.1650.26

googlechromeMatch31.0.1650.27

googlechromeMatch31.0.1650.28

googlechromeMatch31.0.1650.29

googlechromeMatch31.0.1650.30

googlechromeMatch31.0.1650.31

googlechromeMatch31.0.1650.32

googlechromeMatch31.0.1650.33

googlechromeMatch31.0.1650.34

googlechromeMatch31.0.1650.35

googlechromeMatch31.0.1650.36

googlechromeMatch31.0.1650.37

googlechromeMatch31.0.1650.38

googlechromeMatch31.0.1650.39

googlechromeMatch31.0.1650.41

googlechromeMatch31.0.1650.42

googlechromeMatch31.0.1650.43

googlechromeMatch31.0.1650.44

googlechromeMatch31.0.1650.45

googlechromeMatch31.0.1650.46

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googlechrome31.0.1650.0cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:*
googlechrome31.0.1650.2cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:*
googlechrome31.0.1650.3cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:*
googlechrome31.0.1650.4cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:*
googlechrome31.0.1650.5cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:*
googlechrome31.0.1650.6cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:*
googlechrome31.0.1650.7cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:*
googlechrome31.0.1650.8cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:*
googlechrome31.0.1650.9cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
google	chrome	31.0.1650.0	cpe:2.3:a:google:chrome:31.0.1650.0:::::::*
google	chrome	31.0.1650.2	cpe:2.3:a:google:chrome:31.0.1650.2:::::::*
google	chrome	31.0.1650.3	cpe:2.3:a:google:chrome:31.0.1650.3:::::::*
google	chrome	31.0.1650.4	cpe:2.3:a:google:chrome:31.0.1650.4:::::::*
google	chrome	31.0.1650.5	cpe:2.3:a:google:chrome:31.0.1650.5:::::::*
google	chrome	31.0.1650.6	cpe:2.3:a:google:chrome:31.0.1650.6:::::::*
google	chrome	31.0.1650.7	cpe:2.3:a:google:chrome:31.0.1650.7:::::::*
google	chrome	31.0.1650.8	cpe:2.3:a:google:chrome:31.0.1650.8:::::::*
google	chrome	31.0.1650.9	cpe:2.3:a:google:chrome:31.0.1650.9:::::::*