FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2013-6630

This CVE name corresponds to:

Entered Topic
2013-12-14 mozilla -- multiple vulnerabilities
2013-11-12 chromium -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2013-6630
Phase Assigned(20131105)

Description

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

References

Source Reference
FULLDISC 20131112 bugs in IJG jpeg6b & libjpeg-turbo
CONFIRM http://git.chromium.org/gitweb/?p=chromium/deps/libjpeg_turbo.git;a=commit;h=32cab49bd4cb1ce069a435fd75f9439c34ddc6f8
CONFIRM http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
CONFIRM https://code.google.com/p/chromium/issues/detail?id=299835
CONFIRM http://www.mozilla.org/security/announce/2013/mfsa2013-116.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=891693
CONFIRM http://advisories.mageia.org/MGASA-2013-0333.html
DEBIAN DSA-2799
FEDORA FEDORA-2013-23127
FEDORA FEDORA-2013-23291
FEDORA FEDORA-2013-23295
FEDORA FEDORA-2013-23519
GENTOO GLSA-201606-03
MANDRIVA MDVSA-2013:273
REDHAT RHSA-2013:1803
SUSE openSUSE-SU-2013:1776
SUSE openSUSE-SU-2013:1777
SUSE openSUSE-SU-2013:1861
SUSE openSUSE-SU-2013:1957
SUSE openSUSE-SU-2013:1958
SUSE openSUSE-SU-2013:1959
SUSE openSUSE-SU-2014:0008
SUSE openSUSE-SU-2013:1916
SUSE openSUSE-SU-2013:1917
SUSE openSUSE-SU-2013:1918
SUSE openSUSE-SU-2014:0065
UBUNTU USN-2052-1
UBUNTU USN-2053-1
UBUNTU USN-2060-1
SECTRACK 1029470
SECTRACK 1029476
SECUNIA 56175