7.5

CVE-2013-6665: google chrome

Modified
Published 05-03-2014Last modified 06-08-2024

Vulnerability summary

CVE-2013-6665 is a high (CVSS 7.5) vulnerability in google chrome. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.8% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
1.42%
0%100%
Low · -0.01 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
DSA-2883-1MGASA-2014-0121

Timeline

  1. 05-03-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large texture size that triggers improper memory allocation in the software renderer.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.42%

Chance of exploitation in the next 30 days

Percentile

73%

Versus all other CVEs

30-day change

Decrease -0.01 pp

From 1.43% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Google1 product
  • chromeEOL≤ 33.0.1750.144 | 33.0.1750.0 | 33.0.1750.1 | 33.0.1750.2 | 33.0.1750.3 | 33.0.1750.4 | 33.0.1750.5 | 33.0.1750.6 | 33.0.1750.7 | 33.0.1750.8 | 33.0.1750.9 | 33.0.1750.10 | 33.0.1750.11 | 33.0.1750.12 | 33.0.1750.13 | 33.0.1750.14 | 33.0.1750.15 | 33.0.1750.16 | 33.0.1750.18 | 33.0.1750.19 | 33.0.1750.20 | 33.0.1750.21 | 33.0.1750.22 | 33.0.1750.23 | 33.0.1750.24 | 33.0.1750.25 | 33.0.1750.26 | 33.0.1750.27 | 33.0.1750.28 | 33.0.1750.29 | 33.0.1750.30 | 33.0.1750.31 | 33.0.1750.34 | 33.0.1750.35 | 33.0.1750.36 | 33.0.1750.37 | 33.0.1750.38 | 33.0.1750.39 | 33.0.1750.40 | 33.0.1750.41 | 33.0.1750.42 | 33.0.1750.43 | 33.0.1750.44 | 33.0.1750.45 | 33.0.1750.46 | 33.0.1750.47 | 33.0.1750.48 | 33.0.1750.49 | 33.0.1750.50 | 33.0.1750.51 | 33.0.1750.52 | 33.0.1750.53 | 33.0.1750.54 | 33.0.1750.55 | 33.0.1750.56 | 33.0.1750.57 | 33.0.1750.58 | 33.0.1750.59 | 33.0.1750.60 | 33.0.1750.61 | 33.0.1750.62 | 33.0.1750.63 | 33.0.1750.64 | 33.0.1750.65 | 33.0.1750.66 | 33.0.1750.67 | 33.0.1750.68 | 33.0.1750.69 | 33.0.1750.70 | 33.0.1750.71 | 33.0.1750.73 | 33.0.1750.74 | 33.0.1750.75 | 33.0.1750.76 | 33.0.1750.77 | 33.0.1750.79 | 33.0.1750.80 | 33.0.1750.81 | 33.0.1750.82 | 33.0.1750.83 | 33.0.1750.85 | 33.0.1750.88 | 33.0.1750.89 | 33.0.1750.90 | 33.0.1750.91 | 33.0.1750.92 | 33.0.1750.93 | 33.0.1750.104 | 33.0.1750.106 | 33.0.1750.107 | 33.0.1750.108 | 33.0.1750.109 | 33.0.1750.110 | 33.0.1750.111 | 33.0.1750.112 | 33.0.1750.113 | 33.0.1750.115 | 33.0.1750.116 | 33.0.1750.117 | 33.0.1750.124 | 33.0.1750.125 | 33.0.1750.126 | 33.0.1750.132 | 33.0.1750.133 | 33.0.1750.135 | 33.0.1750.136

1 vendor · 1 product

References

5 links