Vulnerability · NVD

CVE-2013-2853

CVE-2013-2853, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 1.1 %
Tracked apps: 2
Still exposed: 0

Published on 2013-07-10

The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.

EPSS 1.12% above median percentile 63.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Chrome macOS com.google.Chrome

Affected ≤28.0.1500.70 Fixed in > 28.0.1500.70 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected ≤28.0.1500.70 Fixed in > 28.0.1500.70 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (126)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤28.0.1500.70	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤28.0.1500.70	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.5:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.5:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.6:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.6:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.9:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.9:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.10:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.10:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.11:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.11:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.12:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.12:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.13:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.13:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.14:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.14:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.15:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.15:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.16:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.16:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.17:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.17:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.19:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.19:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.20:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.20:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.23:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.23:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.24:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.25:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.25:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.26:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.26:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.28:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.29:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.34:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.34:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.35:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.35:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.40:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.40:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.41:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.41:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.44:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.44:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.45:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.45:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.47:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.47:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.49:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.49:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.50:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.50:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.51:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.51:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.53:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.54:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.54:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.56:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.56:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.58:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.58:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.60:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.60:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.61:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.61:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.62:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.62:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.63:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.63:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.64:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.64:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.66:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.66:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.68:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:28.0.1500.68:::::::*

View on NVD ↗