CVE-2013-2877

CVE-2013-2877 describes an out-of-bounds read vulnerability in libxml2 versions prior to 2.9.0, affecting products like Google Chrome before 28.0.1500.71. This flaw, stemming from inadequate checks for the XML_PARSER_EOF state, can be triggered by a malformed XML document that ends abruptly. Rated with a CVSS score of 5.0, it allows remote attackers to cause a denial of service with low attack complexity and no authentication required. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, despite some community discussion and media coverage at the time of discovery.