{"id":"CVE-2013-2853","aliases":["DSA-2724-1","EUVD-2013-2792","GHSA-4w8v-46j6-77cf","MGASA-2013-0234"],"status":"published","title":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are...","description":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0112,"percentile":0.66405,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2013-07-10T10:00:00Z","modified":"2026-06-16T23:54:04Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.71-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1"],"bundled":13},{"source":"osv","ecosystem":"Mageia:2","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.71-1.mga2"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.71-1.mga3"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.71-1.mga3.tainted"}]}],"bundled":12}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://code.google.com/p/chromium/issues/detail?id=244260","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=44b400c80726ee5d205a27730a0c846be656a071","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17033","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.debian.org/security/2013/dsa-2724","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","web"]},{"url":"http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=f4f9f4948de5a59462e13ad712d7d9117238aeea","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2853"},{"url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=44b400c80726ee5d205a27730a0c846be656a071"},{"url":"http://git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=f4f9f4948de5a59462e13ad712d7d9117238aeea"},{"url":"https://github.com/advisories/GHSA-4w8v-46j6-77cf"},{"url":"https://advisories.mageia.org/MGASA-2013-0234.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10804","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-2853","description":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.","status":"published","published":"2013-07-10T10:00:00Z","modified":"2024-08-06T15:52:20.637Z","updated_at":"2026-11-02T14:34:56.19172Z"}],"euvd":[{"id":"EUVD-2013-2792","description":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.","status":"published","published":"2013-07-10T10:00:00Z","modified":"2024-08-06T15:52:20Z","updated_at":"2026-11-03T01:56:37.731533Z"}],"ghsa":[{"id":"GHSA-4w8v-46j6-77cf","title":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are...","description":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.","status":"published","published":"2022-05-17T00:54:59Z","modified":"2025-04-11T04:12:54Z","updated_at":"2026-11-02T15:01:14.490744Z"}],"nvd":[{"id":"CVE-2013-2853","description":"The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.","status":"published","published":"2013-07-10T10:55:01.783Z","modified":"2026-06-16T23:54:04.82Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:31.592595Z"}],"osv":[{"id":"DSA-2724-1","title":"chromium-browser - several","status":"published","published":"2013-07-17T00:00:00Z","modified":"2026-03-09T01:21:42.992693Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0234","title":"Updated chromium-browser-stable packages fix security vulnerabilities","description":"Updated chromium-browser-stable packages fix security vulnerabilities:\n\nThe HTTPS implementation does not ensure that headers are terminated by\n\\r\\n\\r\\n (carriage return, newline, carriage return, newline)\n(CVE-2013-2853).\n\nChrome does not properly prevent pop-under windows (CVE-2013-2867).\n\ncommon/extensions/sync_helper.cc proceeds with sync operations for NPAPI\nextensions without checking for a certain plugin permission setting\n(CVE-2013-2868).\n\nDenial of service (out-of-bounds read) via a crafted JPEG2000 image\n(CVE-2013-2869).\n\nUse-after-free vulnerability in network sockets (CVE-2013-2870).\n\nUse-after-free vulnerability in input handling (CVE-2013-2871).\n\nUse-after-free vulnerability in resource loading (CVE-2013-2873).\n\nOut-of-bounds read in SVG file handling (CVE-2013-2875).\n\nChrome does not properly enforce restrictions on the capture of screenshots\nby extensions, which could lead to information disclosure from previous page\nvisits (CVE-2013-2876).\n\nOut-of-bounds read in text handling (CVE-2013-2878).\n\nThe circumstances in which a renderer process can be considered a trusted\nprocess for sign-in and subsequent sync operations were not propertly\nchecked (CVE-2013-2879).\n\nThe chrome 28 development team found various issues from internal fuzzing,\naudits, and other studies (CVE-2013-2880).\n","status":"published","published":"2013-07-26T11:52:03Z","modified":"2026-04-16T04:44:47.82722065Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}