{"id":"CVE-2013-6663","aliases":["DSA-2883-1","EUVD-2013-6465","GHSA-pjcq-p3fr-jpj9","MGASA-2014-0121"],"status":"published","title":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics...","description":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01848,"percentile":0.79212,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2014-03-05T02:00:00Z","modified":"2026-06-17T00:00:45Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.1750.152-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1","28.0.1500.71-1","28.0.1500.71-1~deb7u1","28.0.1500.71-2","28.0.1500.95-1","28.0.1500.95-1~deb7u1","28.0.1500.95-2","28.0.1500.95-3","29.0.1547.57-1","29.0.1547.57-1~deb7u1","29.0.1547.57-2","29.0.1547.57-3","29.0.1547.57-3+exp1","30.0.1599.101-1","30.0.1599.101-1~deb7u1","30.0.1599.101-2","30.0.1599.101-3","31.0.1650.57-1","31.0.1650.57-1~deb7u1","31.0.1650.63-1","31.0.1650.63-1~deb7u1","32.0.1700.123-1","32.0.1700.123-1~deb7u1","32.0.1700.123-2","32.0.1700.123-3","32.0.1700.123-4"],"bundled":23},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.1750.146-1.mga3"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.1750.146-1.mga3.tainted"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.1750.146-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.1750.146-1.mga4.tainted"}]}],"bundled":6}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"http://www.securityfocus.com/bid/65930","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.debian.org/security/2014/dsa-2883","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://support.apple.com/kb/HT6441","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/kb/HT6537","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://support.apple.com/kb/HT6442","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61318","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://support.apple.com/kb/HT6440","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61306","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=344492","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://src.chromium.org/viewvc/blink?revision=168152\u0026view=revision","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6663"},{"url":"https://github.com/advisories/GHSA-pjcq-p3fr-jpj9"},{"url":"https://advisories.mageia.org/MGASA-2014-0121.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12945","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-6663","description":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.","status":"published","published":"2014-03-05T02:00:00Z","modified":"2024-08-06T17:46:22.303Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-6465","description":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.","status":"published","published":"2014-03-05T02:00:00Z","modified":"2024-08-06T17:46:22Z","updated_at":"2026-11-03T01:56:25.766525Z"}],"ghsa":[{"id":"GHSA-pjcq-p3fr-jpj9","title":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics...","description":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.","status":"published","published":"2022-05-17T03:07:10Z","modified":"2023-01-27T05:06:39Z","updated_at":"2026-11-02T14:42:57.782632Z"}],"nvd":[{"id":"CVE-2013-6663","description":"Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.","status":"published","published":"2014-03-05T05:11:22.187Z","modified":"2026-06-17T00:00:45.807Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:50.049023Z"}],"osv":[{"id":"DSA-2883-1","title":"chromium-browser - security update","status":"published","published":"2014-03-23T00:00:00Z","modified":"2026-03-09T01:22:33.957237Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0121","title":"Updated chromium-browser-stable package fixes security vulnerabilities","description":"Use-after-free in svg images (CVE-2013-6663).\nUse-after-free in speech recognition (CVE-2013-6664).\nHeap buffer overflow in software rendering (CVE-2013-6665).\nChrome allows requests in flash header request (CVE-2013-6666).\nVarious fixes from internal audits, fuzzing and other initiatives\n(CVE-2013-6667).\nMultiple vulnerabilities in V8 fixed in version 3.24.35.10\n(CVE-2013-6668).\n","status":"published","published":"2014-03-06T21:52:06Z","modified":"2026-04-16T06:25:54.983147505Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}