Lucene search
HistoryJan 28, 2014 - 2:30 p.m.
CVE-2013-6649
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Affected configurations
Node
googlechromeRangeβ€32.0.1700.101
ORgooglechromeMatch32.0.1700.0
ORgooglechromeMatch32.0.1700.2
ORgooglechromeMatch32.0.1700.3
ORgooglechromeMatch32.0.1700.4
ORgooglechromeMatch32.0.1700.5
ORgooglechromeMatch32.0.1700.6
ORgooglechromeMatch32.0.1700.7
ORgooglechromeMatch32.0.1700.8
ORgooglechromeMatch32.0.1700.9
ORgooglechromeMatch32.0.1700.10
ORgooglechromeMatch32.0.1700.11
ORgooglechromeMatch32.0.1700.12
ORgooglechromeMatch32.0.1700.13
ORgooglechromeMatch32.0.1700.14
ORgooglechromeMatch32.0.1700.15
ORgooglechromeMatch32.0.1700.16
ORgooglechromeMatch32.0.1700.17
ORgooglechromeMatch32.0.1700.18
ORgooglechromeMatch32.0.1700.19
ORgooglechromeMatch32.0.1700.21
ORgooglechromeMatch32.0.1700.22
ORgooglechromeMatch32.0.1700.23
ORgooglechromeMatch32.0.1700.24
ORgooglechromeMatch32.0.1700.26
ORgooglechromeMatch32.0.1700.27
ORgooglechromeMatch32.0.1700.28
ORgooglechromeMatch32.0.1700.29
ORgooglechromeMatch32.0.1700.30
ORgooglechromeMatch32.0.1700.31
ORgooglechromeMatch32.0.1700.32
ORgooglechromeMatch32.0.1700.33
ORgooglechromeMatch32.0.1700.34
ORgooglechromeMatch32.0.1700.35
ORgooglechromeMatch32.0.1700.38
ORgooglechromeMatch32.0.1700.39
ORgooglechromeMatch32.0.1700.41
ORgooglechromeMatch32.0.1700.50
ORgooglechromeMatch32.0.1700.51
ORgooglechromeMatch32.0.1700.52
ORgooglechromeMatch32.0.1700.53
ORgooglechromeMatch32.0.1700.54
ORgooglechromeMatch32.0.1700.55
ORgooglechromeMatch32.0.1700.56
ORgooglechromeMatch32.0.1700.57
ORgooglechromeMatch32.0.1700.58
ORgooglechromeMatch32.0.1700.59
ORgooglechromeMatch32.0.1700.62
ORgooglechromeMatch32.0.1700.63
ORgooglechromeMatch32.0.1700.64
ORgooglechromeMatch32.0.1700.65
ORgooglechromeMatch32.0.1700.66
ORgooglechromeMatch32.0.1700.67
ORgooglechromeMatch32.0.1700.68
ORgooglechromeMatch32.0.1700.69
ORgooglechromeMatch32.0.1700.70
ORgooglechromeMatch32.0.1700.71
ORgooglechromeMatch32.0.1700.72
ORgooglechromeMatch32.0.1700.74
ORgooglechromeMatch32.0.1700.75
ORgooglechromeMatch32.0.1700.76
ORgooglechromeMatch32.0.1700.77
ORgooglechromeMatch32.0.1700.94
ORgooglechromeMatch32.0.1700.95
ORgooglechromeMatch32.0.1700.96
ORgooglechromeMatch32.0.1700.97
ORgooglechromeMatch32.0.1700.98
ORgooglechromeMatch32.0.1700.99
ORgooglechromeMatch32.0.1700.100
Node
debiandebian_linuxMatch7.0
ORdebiandebian_linuxMatch8.0
Node
opensuseopensuseMatch12.3
ORopensuseopensuseMatch13.1
Related
debiancve
debiancve
CVE-2013-6649
2014-01-28 14:30:00
seebug
seebug
Google ChromeιζΎειη¨θΏη¨δ»£η ζ§θ‘ζΌζ΄
2014-02-11 00:00:00
cvelist
cvelist
CVE-2013-6649
2014-01-28 11:00:00
cve
cve
CVE-2013-6649
2014-01-28 14:30:33
ubuntucve
ubuntucve
CVE-2013-6649
2014-01-28 00:00:00
prion
prion
Design/Logic Flaw
2014-01-28 14:30:00
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (f9810c43-87a5-11e3-9214-00262d5ed8ee)
2014-01-28 00:00:00
Google Chrome < 32.0.1700.102 Multiple Vulnerabilities (Mac OS X)
2014-01-28 00:00:00
Google Chrome < 32.0.1700.102 Multiple Vulnerabilities
2014-02-08 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-01-27 00:00:00
chrome
chrome
Stable Channel Update
2014-01-27 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities-01 (Feb 2014) - Linux
2014-02-03 00:00:00
Google Chrome Multiple Vulnerabilities-01 (Feb 2014) - Mac OS X
2014-02-03 00:00:00
Google Chrome Multiple Vulnerabilities-01 (Feb 2014) - Windows
2014-02-03 00:00:00
suse
suse
chromium to 32.0.1700.102 (important)
2014-02-18 10:04:12
securityvulns
securityvulns
Chromium / Google Chrome multiple security vulnerabilities
2014-02-18 00:00:00
[SECURITY] [DSA 2862-1] chromium-browser security update
2014-02-18 00:00:00
debian
debian
[SECURITY] [DSA 2862-1] chromium-browser security update
2014-02-16 18:00:27
[SECURITY] [DSA 2862-1] chromium-browser security update
2014-02-16 18:00:27
mageia
mageia
Updated chromium-browser-stable package fixes multiple vulnerabilities
2014-02-08 22:46:43
osv
osv
chromium-browser - several
2014-02-16 00:00:00
gentoo
gentoo
Chromium, V8: Multiple vulnerabilities
2014-03-05 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
Related for NVD:CVE-2013-6649