NVD

Id
41557  
Name
CVE-2013-6629  
Description
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-11-18  
Modified Date
2016-12-07  
Seq
2013-6629  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210094 41557 CVE-2013-6629 http://advisories.mageia.org/MGASA-2013-0333.html  View
210095 41557 CVE-2013-6629 20131112 bugs in IJG jpeg6b & libjpeg-turbo  View
210096 41557 CVE-2013-6629 http://bugs.ghostscript.com/show_bug.cgi?id=686980  View
210097 41557 CVE-2013-6629 http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html  View
210098 41557 CVE-2013-6629 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
210099 41557 CVE-2013-6629 FEDORA-2013-23127  View
210100 41557 CVE-2013-6629 FEDORA-2013-23295  View
210101 41557 CVE-2013-6629 FEDORA-2013-23519  View
210102 41557 CVE-2013-6629 FEDORA-2013-23291  View
210103 41557 CVE-2013-6629 openSUSE-SU-2013:1776  View
210104 41557 CVE-2013-6629 openSUSE-SU-2013:1777  View
210105 41557 CVE-2013-6629 openSUSE-SU-2013:1861  View
210106 41557 CVE-2013-6629 openSUSE-SU-2013:1916  View
210107 41557 CVE-2013-6629 openSUSE-SU-2013:1917  View
210108 41557 CVE-2013-6629 openSUSE-SU-2013:1918  View
210109 41557 CVE-2013-6629 openSUSE-SU-2013:1957  View
210110 41557 CVE-2013-6629 openSUSE-SU-2013:1958  View
210111 41557 CVE-2013-6629 openSUSE-SU-2013:1959  View
210112 41557 CVE-2013-6629 openSUSE-SU-2014:0008  View
210113 41557 CVE-2013-6629 openSUSE-SU-2014:0065  View
210114 41557 CVE-2013-6629 SSRT101667  View
210115 41557 CVE-2013-6629 SSRT101668  View
210116 41557 CVE-2013-6629 RHSA-2013:1803  View
210117 41557 CVE-2013-6629 RHSA-2013:1804  View
210118 41557 CVE-2013-6629 GLSA-201406-32  View
210119 41557 CVE-2013-6629 http://support.apple.com/kb/HT6150  View
210120 41557 CVE-2013-6629 http://support.apple.com/kb/HT6162  View
210121 41557 CVE-2013-6629 http://support.apple.com/kb/HT6163  View
210122 41557 CVE-2013-6629 http://www-01.ibm.com/support/docview.wss?uid=swg21672080  View
210123 41557 CVE-2013-6629 http://www-01.ibm.com/support/docview.wss?uid=swg21676746  View
210124 41557 CVE-2013-6629 DSA-2799  View
210125 41557 CVE-2013-6629 MDVSA-2013:273  View
210126 41557 CVE-2013-6629 http://www.mozilla.org/security/announce/2013/mfsa2013-116.html  View
210127 41557 CVE-2013-6629 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
210128 41557 CVE-2013-6629 http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html  View
210129 41557 CVE-2013-6629 1029470  View
210130 41557 CVE-2013-6629 1029476  View
210131 41557 CVE-2013-6629 USN-2052-1  View
210132 41557 CVE-2013-6629 USN-2053-1  View
210133 41557 CVE-2013-6629 USN-2060-1  View
210134 41557 CVE-2013-6629 https://bugzilla.mozilla.org/show_bug.cgi?id=891693  View
210135 41557 CVE-2013-6629 https://code.google.com/p/chromium/issues/detail?id=258723  View
210136 41557 CVE-2013-6629 GLSA-201606-03  View
210137 41557 CVE-2013-6629 https://src.chromium.org/viewvc/chrome?revision=229729&view=revision  View
210138 41557 CVE-2013-6629 https://www.ibm.com/support/docview.wss?uid=swg21675973  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23600 JVNDB-2013-005175 Google Chrome および Ghostscript などで使用される libjpeg 6b および libjpeg-turbo における重要な情報を取得される脆弱性 Google Chrome、Ghostscript およびその他の製品で使用される (1) libjpeg 6b および (2) libjpeg-turbo の jdmarker.c 内の get_sos 関数は、Start Of Scan (SOS) JPEG マーカーに従うセグメントの読み取り中にコンポーネントデータの特定の重複をチェックしないため、初期化されていないメモリ領域から重要な情報を取得される脆弱性が存在します。 CVE-2013-6629 66571 CVE-2013-6629 41557 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005175.html 2013-11-12 2015-03-16 View