CVE-2013-2853
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-2853
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Chrome 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。 Google Chrome 28.0.1500.70及之前的版本中的HTTPS实现中存在漏洞，该漏洞源于程序没有确保标头被\r\n\r\n（回车符，换行符，回车符，换行符）终止。中间人攻击者可通过截断标头利用该漏洞产生未明影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-2853
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-2853
请登录查看更多情报信息。
- https://code.google.com/p/chromium/issues/detail?id=244260x_refsource_CONFIRM
- http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.htmlx_refsource_CONFIRM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17033vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2013-2853
Same Patch Batch · n/a · 2013-07-10 · 71 CVEs total
| CVE-2013-3133 | Microsoft .NET Framework 匿名方法注入漏洞 | |
| CVE-2013-3171 | Microsoft .NET Framework 委派序列化漏洞 | |
| CVE-2013-3166 | Microsoft Internet Explorer Shift JIS 字符编码漏洞 | |
| CVE-2013-3148 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3147 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3146 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3145 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3144 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3143 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3134 | Microsoft .NET Framework 数组分配漏洞 | |
| CVE-2013-3149 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-3132 | Microsoft .NET Framework 委派反射绕过漏洞 | |
| CVE-2013-3131 | Microsoft .NET Framework 数组访问冲突漏洞 | |
| CVE-2013-3129 | Microsoft 多款产品代码注入漏洞 | |
| CVE-2013-3127 | Microsoft WMV 视频解码器远程执行代码漏洞 | |
| CVE-2013-3115 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2013-1345 | Microsoft Windows Win32k 安全漏洞 | |
| CVE-2013-1340 | Microsoft Windows Win32k 解除引用漏洞 | |
| CVE-2013-1300 | Microsoft Windows Win32k 内存分配漏洞 | |
| CVE-2013-3350 | Adobe ColdFusion 安全绕过漏洞 |
Showing top 20 of 71 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2013-2853
No comments yet