CVE-2013-6649: Use After Free
Published Jan 28, 2014
·Updated
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Affected Software
73 affected components
Google Chrome<=32.0.1700.101
Google Chrome=32.0.1700.0
Google Chrome=32.0.1700.2
Google Chrome=32.0.1700.3
Google Chrome=32.0.1700.4
Google Chrome=32.0.1700.5
Google Chrome=32.0.1700.6
Google Chrome=32.0.1700.7
Google Chrome=32.0.1700.8
Google Chrome=32.0.1700.9
Google Chrome=32.0.1700.10
Google Chrome=32.0.1700.11
Google Chrome=32.0.1700.12
Google Chrome=32.0.1700.13
Google Chrome=32.0.1700.14
Google Chrome=32.0.1700.15
Google Chrome=32.0.1700.16
Google Chrome=32.0.1700.17
Google Chrome=32.0.1700.18
Google Chrome=32.0.1700.19
Google Chrome=32.0.1700.21
Google Chrome=32.0.1700.22
Google Chrome=32.0.1700.23
Google Chrome=32.0.1700.24
Google Chrome=32.0.1700.26
Google Chrome=32.0.1700.27
Google Chrome=32.0.1700.28
Google Chrome=32.0.1700.29
Google Chrome=32.0.1700.30
Google Chrome=32.0.1700.31
Google Chrome=32.0.1700.32
Google Chrome=32.0.1700.33
Google Chrome=32.0.1700.34
Google Chrome=32.0.1700.35
Google Chrome=32.0.1700.38
Google Chrome=32.0.1700.39
Google Chrome=32.0.1700.41
Google Chrome=32.0.1700.50
Google Chrome=32.0.1700.51
Google Chrome=32.0.1700.52
Google Chrome=32.0.1700.53
Google Chrome=32.0.1700.54
Google Chrome=32.0.1700.55
Google Chrome=32.0.1700.56
Google Chrome=32.0.1700.57
Google Chrome=32.0.1700.58
Google Chrome=32.0.1700.59
Google Chrome=32.0.1700.62
Google Chrome=32.0.1700.63
Google Chrome=32.0.1700.64
Google Chrome=32.0.1700.65
Google Chrome=32.0.1700.66
Google Chrome=32.0.1700.67
Google Chrome=32.0.1700.68
Google Chrome=32.0.1700.69
Google Chrome=32.0.1700.70
Google Chrome=32.0.1700.71
Google Chrome=32.0.1700.72
Google Chrome=32.0.1700.74
Google Chrome=32.0.1700.75
Google Chrome=32.0.1700.76
Google Chrome=32.0.1700.77
Google Chrome=32.0.1700.94
Google Chrome=32.0.1700.95
Google Chrome=32.0.1700.96
Google Chrome=32.0.1700.97
Google Chrome=32.0.1700.98
Google Chrome=32.0.1700.99
Google Chrome=32.0.1700.100
Debian Debian Linux=7.0
Debian Debian Linux=8.0
openSUSE openSUSE=12.3
openSUSE openSUSE=13.1
Event History
Jan 28, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·02:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6649?
CVE-2013-6649 has a severity rating that allows remote attackers to potentially cause a denial of service.
2
How do I fix CVE-2013-6649?
The fix for CVE-2013-6649 involves upgrading Google Chrome to version 32.0.1700.102 or later.
3
What systems are affected by CVE-2013-6649?
CVE-2013-6649 affects multiple versions of Google Chrome prior to version 32.0.1700.102.
4
What type of vulnerability is CVE-2013-6649?
CVE-2013-6649 is classified as a use-after-free vulnerability.
5
Can CVE-2013-6649 lead to other impacts besides a denial of service?
Yes, CVE-2013-6649 may allow for unspecified other impacts due to its nature.