CVE-2013-6649

Published Jan 28, 2014 CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Description
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2862-1 chromium-browser security update
EUVD EUVD EUVD-2013-6451 Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 5:46 PM
Reserved
Nov 5, 2013, 12:00 AM
Status
Modified
Published
Jan 28, 2014, 2:30 PM
Modified
Jun 17, 2026, 12:00 AM