Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-6649
HistoryJan 28, 2014 - 2:30 p.m.

CVE-2013-6649

2014-01-2814:30:00
Debian Security Bug Tracker
security-tracker.debian.org
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.

OSVersionArchitecturePackageVersionFilename
Debian9allchromium-browser<Β 70.0.3538.110-1~deb9u1chromium-browser_70.0.3538.110-1~deb9u1_all.deb
Debian9alllibv8-3.14<=Β 3.14.5.8-11libv8-3.14_3.14.5.8-11_all.deb

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P