CVEvulnerability
CVE-2013-6649
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Affected configurations
• google chrome (<= 32.0.1700.101)
• google chrome 32.0.1700.0
• google chrome 32.0.1700.2
• google chrome 32.0.1700.3
• google chrome 32.0.1700.4
• google chrome 32.0.1700.5
• google chrome 32.0.1700.6
• google chrome 32.0.1700.7
• google chrome 32.0.1700.8
• google chrome 32.0.1700.9
• google chrome 32.0.1700.10
• google chrome 32.0.1700.11
• google chrome 32.0.1700.12
• google chrome 32.0.1700.13
• google chrome 32.0.1700.14
• google chrome 32.0.1700.15
• google chrome 32.0.1700.16
• google chrome 32.0.1700.17
• google chrome 32.0.1700.18
• google chrome 32.0.1700.19
• google chrome 32.0.1700.21
• google chrome 32.0.1700.22
• google chrome 32.0.1700.23
• google chrome 32.0.1700.24
• google chrome 32.0.1700.26
• google chrome 32.0.1700.27
• google chrome 32.0.1700.28
• google chrome 32.0.1700.29
• google chrome 32.0.1700.30
• google chrome 32.0.1700.31
• google chrome 32.0.1700.32
• google chrome 32.0.1700.33
• google chrome 32.0.1700.34
• google chrome 32.0.1700.35
• google chrome 32.0.1700.38
• google chrome 32.0.1700.39
• google chrome 32.0.1700.41
• google chrome 32.0.1700.50
• google chrome 32.0.1700.51
• google chrome 32.0.1700.52
• google chrome 32.0.1700.53
• google chrome 32.0.1700.54
• google chrome 32.0.1700.55
• google chrome 32.0.1700.56
• google chrome 32.0.1700.57
• google chrome 32.0.1700.58
• google chrome 32.0.1700.59
• google chrome 32.0.1700.62
• google chrome 32.0.1700.63
• google chrome 32.0.1700.64
• google chrome 32.0.1700.65
• google chrome 32.0.1700.66
• google chrome 32.0.1700.67
• google chrome 32.0.1700.68
• google chrome 32.0.1700.69
• google chrome 32.0.1700.70
• google chrome 32.0.1700.71
• google chrome 32.0.1700.72
• google chrome 32.0.1700.74
• google chrome 32.0.1700.75
… and 13 more
Related
Weakness · not in database (1)
References
- http://crbug.com/330420 Exploit
- http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html Third Party Advisory
- http://www.debian.org/security/2014/dsa-2862 Third Party Advisory
- https://src.chromium.org/viewvc/blink?revision=164536&view=revision src.chromium.org
- http://crbug.com/330420 Exploit
- http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html Third Party Advisory
- http://www.debian.org/security/2014/dsa-2862 Third Party Advisory
- https://src.chromium.org/viewvc/blink?revision=164536&view=revision src.chromium.org