Vulnerability in Google Chrome
CVE-2013-6649
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome — versions 32.0.1700.0, 32.0.1700.2, 32.0.1700.3
- Debian Debian_linux — versions 7.0, 8.0
- Opensuse — versions 12.3, 13.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)