CVE-2013-2875: Buffer Overflow
Published Jul 10, 2013
·Updated
core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected Software
63 affected components
Google Chrome<=28.0.1500.70
Google Chrome=28.0.1500.0
Google Chrome=28.0.1500.2
Google Chrome=28.0.1500.3
Google Chrome=28.0.1500.4
Google Chrome=28.0.1500.5
Google Chrome=28.0.1500.6
Google Chrome=28.0.1500.8
Google Chrome=28.0.1500.9
Google Chrome=28.0.1500.10
Google Chrome=28.0.1500.11
Google Chrome=28.0.1500.12
Google Chrome=28.0.1500.13
Google Chrome=28.0.1500.14
Google Chrome=28.0.1500.15
Google Chrome=28.0.1500.16
Google Chrome=28.0.1500.17
Google Chrome=28.0.1500.18
Google Chrome=28.0.1500.19
Google Chrome=28.0.1500.20
Google Chrome=28.0.1500.21
Google Chrome=28.0.1500.22
Google Chrome=28.0.1500.23
Google Chrome=28.0.1500.24
Google Chrome=28.0.1500.25
Google Chrome=28.0.1500.26
Google Chrome=28.0.1500.27
Google Chrome=28.0.1500.28
Google Chrome=28.0.1500.29
Google Chrome=28.0.1500.31
Google Chrome=28.0.1500.32
Google Chrome=28.0.1500.33
Google Chrome=28.0.1500.34
Google Chrome=28.0.1500.35
Google Chrome=28.0.1500.36
Google Chrome=28.0.1500.37
Google Chrome=28.0.1500.38
Google Chrome=28.0.1500.39
Google Chrome=28.0.1500.40
Google Chrome=28.0.1500.41
Google Chrome=28.0.1500.42
Google Chrome=28.0.1500.43
Google Chrome=28.0.1500.44
Google Chrome=28.0.1500.45
Google Chrome=28.0.1500.46
Google Chrome=28.0.1500.47
Google Chrome=28.0.1500.48
Google Chrome=28.0.1500.49
Google Chrome=28.0.1500.50
Google Chrome=28.0.1500.51
Google Chrome=28.0.1500.52
Google Chrome=28.0.1500.53
Google Chrome=28.0.1500.54
Google Chrome=28.0.1500.56
Google Chrome=28.0.1500.58
Google Chrome=28.0.1500.59
Google Chrome=28.0.1500.60
Google Chrome=28.0.1500.61
Google Chrome=28.0.1500.62
Google Chrome=28.0.1500.63
Google Chrome=28.0.1500.64
Google Chrome=28.0.1500.66
Google Chrome=28.0.1500.68
Event History
Jul 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2875?
CVE-2013-2875 has a medium severity level, resulting in a denial of service due to an out-of-bounds read.
2
How do I fix CVE-2013-2875?
To mitigate CVE-2013-2875, update Google Chrome to version 28.0.1500.71 or later.
3
What versions of Google Chrome are affected by CVE-2013-2875?
Google Chrome versions before 28.0.1500.71, specifically all versions from 28.0.1500.0 to 28.0.1500.70, are affected by CVE-2013-2875.
4
What type of vulnerability is CVE-2013-2875?
CVE-2013-2875 is classified as a denial of service vulnerability in the SVG implementation in Blink used by Google Chrome.
5
Can CVE-2013-2875 be exploited remotely?
Yes, CVE-2013-2875 can be exploited by remote attackers to cause a denial of service.