CVE-2013-6649

Google Chrome < 32.0.1700.102 - Use-After-Free in RenderSVGImage::paint

Title source: llm

Description

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.

References (5)

Core 5

Core References

Patch x_refsource_confirm

https://src.chromium.org/viewvc/blink?revision=164536&view=revision

Exploit x_refsource_confirm

http://crbug.com/330420

Vendor Advisory x_refsource_confirm

http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-2862

Scores

EPSS 0.0145

EPSS Percentile 70.3%

Details

CWE

CWE-399

Status published

Products (50)

debian/debian_linux 7.0

debian/debian_linux 8.0

google/chrome 32.0.1700.0

google/chrome 32.0.1700.2

google/chrome 32.0.1700.3

google/chrome 32.0.1700.4

google/chrome 32.0.1700.5

google/chrome 32.0.1700.6

google/chrome 32.0.1700.7

google/chrome 32.0.1700.8

... and 40 more

Published Jan 28, 2014

Tracked Since Feb 18, 2026