CVE-2013-6627: Improper Restriction of Operations within the Bounds of a Memory Buffer

net/http/httpstreamparser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational aka 1xx status codes, which allows remote web servers to cause a denial of service out-of-bounds read via a crafted response...