CVE-2013-6629 | BDVDB-2026-58451 Detail
Description#
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html
- http://www.securityfocus.com/bid/63676
- https://www.ibm.com/support/docview.wss?uid=swg21675973
- https://access.redhat.com/errata/RHSA-2014:0414
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://rhn.redhat.com/errata/RHSA-2013-1804.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html
- http://marc.info/?l=bugtraq&m=140852886808946&w=2
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080
- https://access.redhat.com/errata/RHSA-2014:0413
- http://secunia.com/advisories/59058
- http://rhn.redhat.com/errata/RHSA-2013-1803.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html
- http://marc.info/?l=bugtraq&m=140852974709252&w=2
- http://support.apple.com/kb/HT6163
Show all 40
- http://secunia.com/advisories/56175
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
- http://secunia.com/advisories/58974
- http://www.securitytracker.com/id/1029470
- https://bugzilla.mozilla.org/show_bug.cgi?id=891693
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html
- http://www.mozilla.org/security/announce/2013/mfsa2013-116.html
- http://support.apple.com/kb/HT6150
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2013-6629
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
- http://www.securitytracker.com/id/1029476
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
- https://src.chromium.org/viewvc/chrome?revision=229729&view=revision
- https://security.gentoo.org/glsa/201606-03
- http://www-01.ibm.com/support/docview.wss?uid=swg21676746
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html
- http://support.apple.com/kb/HT6162
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.