CVE-2013-2853

CVE-2013-2853 describes a vulnerability in Google Chrome versions prior to 28.0.1500.71, where its HTTPS implementation failed to properly terminate headers with the expected carriage return and newline sequence. This flaw allows man-in-the-middle attackers to potentially truncate headers, leading to an unspecified impact. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring medium attack complexity and potentially impacting confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.