CVE-2013-6649: Use After Free
First published: Tue Jan 28 2014(Updated: )
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Chrome (Trace Event) | <=32.0.1700.101 | |
| Google Chrome (Trace Event) | =32.0.1700.0 | |
| Google Chrome (Trace Event) | =32.0.1700.2 | |
| Google Chrome (Trace Event) | =32.0.1700.3 | |
| Google Chrome (Trace Event) | =32.0.1700.4 | |
| Google Chrome (Trace Event) | =32.0.1700.5 | |
| Google Chrome (Trace Event) | =32.0.1700.6 | |
| Google Chrome (Trace Event) | =32.0.1700.7 | |
| Google Chrome (Trace Event) | =32.0.1700.8 | |
| Google Chrome (Trace Event) | =32.0.1700.9 | |
| Google Chrome (Trace Event) | =32.0.1700.10 | |
| Google Chrome (Trace Event) | =32.0.1700.11 | |
| Google Chrome (Trace Event) | =32.0.1700.12 | |
| Google Chrome (Trace Event) | =32.0.1700.13 | |
| Google Chrome (Trace Event) | =32.0.1700.14 | |
| Google Chrome (Trace Event) | =32.0.1700.15 | |
| Google Chrome (Trace Event) | =32.0.1700.16 | |
| Google Chrome (Trace Event) | =32.0.1700.17 | |
| Google Chrome (Trace Event) | =32.0.1700.18 | |
| Google Chrome (Trace Event) | =32.0.1700.19 | |
| Google Chrome (Trace Event) | =32.0.1700.21 | |
| Google Chrome (Trace Event) | =32.0.1700.22 | |
| Google Chrome (Trace Event) | =32.0.1700.23 | |
| Google Chrome (Trace Event) | =32.0.1700.24 | |
| Google Chrome (Trace Event) | =32.0.1700.26 | |
| Google Chrome (Trace Event) | =32.0.1700.27 | |
| Google Chrome (Trace Event) | =32.0.1700.28 | |
| Google Chrome (Trace Event) | =32.0.1700.29 | |
| Google Chrome (Trace Event) | =32.0.1700.30 | |
| Google Chrome (Trace Event) | =32.0.1700.31 | |
| Google Chrome (Trace Event) | =32.0.1700.32 | |
| Google Chrome (Trace Event) | =32.0.1700.33 | |
| Google Chrome (Trace Event) | =32.0.1700.34 | |
| Google Chrome (Trace Event) | =32.0.1700.35 | |
| Google Chrome (Trace Event) | =32.0.1700.38 | |
| Google Chrome (Trace Event) | =32.0.1700.39 | |
| Google Chrome (Trace Event) | =32.0.1700.41 | |
| Google Chrome (Trace Event) | =32.0.1700.50 | |
| Google Chrome (Trace Event) | =32.0.1700.51 | |
| Google Chrome (Trace Event) | =32.0.1700.52 | |
| Google Chrome (Trace Event) | =32.0.1700.53 | |
| Google Chrome (Trace Event) | =32.0.1700.54 | |
| Google Chrome (Trace Event) | =32.0.1700.55 | |
| Google Chrome (Trace Event) | =32.0.1700.56 | |
| Google Chrome (Trace Event) | =32.0.1700.57 | |
| Google Chrome (Trace Event) | =32.0.1700.58 | |
| Google Chrome (Trace Event) | =32.0.1700.59 | |
| Google Chrome (Trace Event) | =32.0.1700.62 | |
| Google Chrome (Trace Event) | =32.0.1700.63 | |
| Google Chrome (Trace Event) | =32.0.1700.64 | |
| Google Chrome (Trace Event) | =32.0.1700.65 | |
| Google Chrome (Trace Event) | =32.0.1700.66 | |
| Google Chrome (Trace Event) | =32.0.1700.67 | |
| Google Chrome (Trace Event) | =32.0.1700.68 | |
| Google Chrome (Trace Event) | =32.0.1700.69 | |
| Google Chrome (Trace Event) | =32.0.1700.70 | |
| Google Chrome (Trace Event) | =32.0.1700.71 | |
| Google Chrome (Trace Event) | =32.0.1700.72 | |
| Google Chrome (Trace Event) | =32.0.1700.74 | |
| Google Chrome (Trace Event) | =32.0.1700.75 | |
| Google Chrome (Trace Event) | =32.0.1700.76 | |
| Google Chrome (Trace Event) | =32.0.1700.77 | |
| Google Chrome (Trace Event) | =32.0.1700.94 | |
| Google Chrome (Trace Event) | =32.0.1700.95 | |
| Google Chrome (Trace Event) | =32.0.1700.96 | |
| Google Chrome (Trace Event) | =32.0.1700.97 | |
| Google Chrome (Trace Event) | =32.0.1700.98 | |
| Google Chrome (Trace Event) | =32.0.1700.99 | |
| Google Chrome (Trace Event) | =32.0.1700.100 | |
| Debian | =7.0 | |
| Debian | =8.0 | |
| SUSE Linux | =12.3 | |
| SUSE Linux | =13.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-6649?
CVE-2013-6649 has a severity rating that allows remote attackers to potentially cause a denial of service.
How do I fix CVE-2013-6649?
The fix for CVE-2013-6649 involves upgrading Google Chrome to version 32.0.1700.102 or later.
What systems are affected by CVE-2013-6649?
CVE-2013-6649 affects multiple versions of Google Chrome prior to version 32.0.1700.102.
What type of vulnerability is CVE-2013-6649?
CVE-2013-6649 is classified as a use-after-free vulnerability.
Can CVE-2013-6649 lead to other impacts besides a denial of service?
Yes, CVE-2013-6649 may allow for unspecified other impacts due to its nature.
- agent/type
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google chrome (trace event)
- version/google chrome (trace event)/32.0.1700.101
- version/google chrome (trace event)/32.0.1700.0
- version/google chrome (trace event)/32.0.1700.2
- version/google chrome (trace event)/32.0.1700.3
- version/google chrome (trace event)/32.0.1700.4
- version/google chrome (trace event)/32.0.1700.5
- version/google chrome (trace event)/32.0.1700.6
- version/google chrome (trace event)/32.0.1700.7
- version/google chrome (trace event)/32.0.1700.8
- version/google chrome (trace event)/32.0.1700.9
- version/google chrome (trace event)/32.0.1700.10
- version/google chrome (trace event)/32.0.1700.11
- version/google chrome (trace event)/32.0.1700.12
- version/google chrome (trace event)/32.0.1700.13
- version/google chrome (trace event)/32.0.1700.14
- version/google chrome (trace event)/32.0.1700.15
- version/google chrome (trace event)/32.0.1700.16
- version/google chrome (trace event)/32.0.1700.17
- version/google chrome (trace event)/32.0.1700.18
- version/google chrome (trace event)/32.0.1700.19
- version/google chrome (trace event)/32.0.1700.21
- version/google chrome (trace event)/32.0.1700.22
- version/google chrome (trace event)/32.0.1700.23
- version/google chrome (trace event)/32.0.1700.24
- version/google chrome (trace event)/32.0.1700.26
- version/google chrome (trace event)/32.0.1700.27
- version/google chrome (trace event)/32.0.1700.28
- version/google chrome (trace event)/32.0.1700.29
- version/google chrome (trace event)/32.0.1700.30
- version/google chrome (trace event)/32.0.1700.31
- version/google chrome (trace event)/32.0.1700.32
- version/google chrome (trace event)/32.0.1700.33
- version/google chrome (trace event)/32.0.1700.34
- version/google chrome (trace event)/32.0.1700.35
- version/google chrome (trace event)/32.0.1700.38
- version/google chrome (trace event)/32.0.1700.39
- version/google chrome (trace event)/32.0.1700.41
- version/google chrome (trace event)/32.0.1700.50
- version/google chrome (trace event)/32.0.1700.51
- version/google chrome (trace event)/32.0.1700.52
- version/google chrome (trace event)/32.0.1700.53
- version/google chrome (trace event)/32.0.1700.54
- version/google chrome (trace event)/32.0.1700.55
- version/google chrome (trace event)/32.0.1700.56
- version/google chrome (trace event)/32.0.1700.57
- version/google chrome (trace event)/32.0.1700.58
- version/google chrome (trace event)/32.0.1700.59
- version/google chrome (trace event)/32.0.1700.62
- version/google chrome (trace event)/32.0.1700.63
- version/google chrome (trace event)/32.0.1700.64
- version/google chrome (trace event)/32.0.1700.65
- version/google chrome (trace event)/32.0.1700.66
- version/google chrome (trace event)/32.0.1700.67
- version/google chrome (trace event)/32.0.1700.68
- version/google chrome (trace event)/32.0.1700.69
- version/google chrome (trace event)/32.0.1700.70
- version/google chrome (trace event)/32.0.1700.71
- version/google chrome (trace event)/32.0.1700.72
- version/google chrome (trace event)/32.0.1700.74
- version/google chrome (trace event)/32.0.1700.75
- version/google chrome (trace event)/32.0.1700.76
- version/google chrome (trace event)/32.0.1700.77
- version/google chrome (trace event)/32.0.1700.94
- version/google chrome (trace event)/32.0.1700.95
- version/google chrome (trace event)/32.0.1700.96
- version/google chrome (trace event)/32.0.1700.97
- version/google chrome (trace event)/32.0.1700.98
- version/google chrome (trace event)/32.0.1700.99
- version/google chrome (trace event)/32.0.1700.100
- vendor/debian
- canonical/debian
- version/debian/7.0
- version/debian/8.0
- vendor/opensuse
- canonical/suse linux
- version/suse linux/12.3
- version/suse linux/13.1