NetSight
IP …
medium5.0

CVE-2013-6629

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other …

Impact

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Affected products

VendorProductAffected versions
GoogleChrome
before 31.0.1650.48
OracleSolaris
Version 11.3
ArtifexGpl Ghostscript
before 9.03
Libjpeg-TurboLibjpeg-Turbo
before 1.3.1
FedoraprojectFedora
Versions 18, 19, 20
OpensuseOpensuse
Versions 12.2, 12.3, 13.1
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04, 13.10
DebianDebian Linux
Versions 7.0, 8.0
MozillaFirefox
before 24.2
before 26.0
MozillaSeamonkey
before 2.23
MozillaThunderbird
before 24.2.0

Weakness classification

CWE-200

References