CVE-2013-6649
Published: 28 January 2014
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
chromium-browser Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
| precise |
Released
(33.0.1750.152-0ubuntu0.12.04.1~pkg879.1)
|
|
| quantal |
Released
(33.0.1750.152-0ubuntu0.12.10.1~pkg895.1)
|
|
| saucy |
Released
(33.0.1750.152-0ubuntu0.13.10.1~pkg984.1)
|
|
| upstream |
Released
(32.0.1700.102)
|