What’s Vulnerable › Vulnerabilities

CVE-2013-6668

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-05 · updated 2026-06-17

Description

Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Affected products

• Debian Linux: 7.0, 8.0
• Google Chrome: through 33.0.1750.144; 33.0.1750.0, 33.0.1750.1, 33.0.1750.2, 33.0.1750.3, 33.0.1750.4, 33.0.1750.5 (+99)
• Google V8: through 3.24.35; 3.24.0, 3.24.1, 3.24.2, 3.24.3, 3.24.4, 3.24.5 (+29)
• Node.js: from 0.10.0 before 0.10.31 — fixed in 0.10.31

How to fix

Upgrade to a fixed version: Node.js 0.10.31. Check the vendor advisory for mitigations.

References

• http://advisories.mageia.org/MGASA-2014-0516.html
• http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html
• http://secunia.com/advisories/61184
• http://www-01.ibm.com/support/docview.wss?uid=swg21683389
• http://www.debian.org/security/2014/dsa-2883
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:142
• http://www.securityfocus.com/bid/65930
• https://code.google.com/p/chromium/issues/detail?id=343964
• https://code.google.com/p/chromium/issues/detail?id=344186
• https://code.google.com/p/chromium/issues/detail?id=347909
• https://code.google.com/p/v8/source/detail?r=19475
• https://code.google.com/p/v8/source/detail?r=19553

Get alerted when CVE-2013-6668 or the next vulnerability affects your stack