CVE-2013-6662

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Google Chrome caches TLS sessions before certificate validation occurs.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 13, 2017
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2013

CVE-2013-66637.5Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in BlinkCVE-2013-66647.5Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as CVE-2013-66657.5Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome beforeCVE-2013-66665.8The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 doesCVE-2013-66677.5Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have othCVE-2013-66687.5Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to causeCVE-2013-66719.8The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkCVE-2013-66724.3Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging cerCVE-2013-66735.9Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's remoCVE-2013-66744.3Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey befCVE-2013-66815.9Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure VulnerabilityCVE-2013-66826.4The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 cert
CVE-2013-6662: Medium severity, CVSS 6.5 | Vulnix