CVE-2013-6629
Description
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Risk Information
Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.21
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Internet Explorer Elevation of Privilege Vulnerability for Windows Server 2012 (KB4015551) - Petya ransomware attack (CVE-2017-0199) | Windows |
| LDAP Elevation of Privilege Vulnerability for Windows Server 2012 (KB4015548) - Petya ransomware attack (CVE-2017-0199) | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows Server 2012 R2 (KB4015550) | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows 8.1 for x64-based Systems (KB4015550) | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows 8.1 (KB4015550) | Windows |
| ADFS Security Feature Bypass Vulnerability for Windows Server 2012 R2 (KB4015547) | Windows |
| ADFS Security Feature Bypass Vulnerability for Windows 8.1 for x64-based Systems (KB4015547) | Windows |
| ADFS Security Feature Bypass Vulnerability for Windows 8.1 (KB4015547) | Windows |
| for Windows 10 for x64-based Systems (KB4015221) - Cumulative | Windows |
| for Windows Server 2016 for x64-based Systems (KB4015217) - Cumulative | Windows |
| for Windows 10 Version 1607 for x64-based Systems (KB4015217) - Cumulative | Windows |
| for Windows 10 Version 1607 (KB4015217) - Cumulative | Windows |
| for Windows 10 Version 1703 for x64-based Systems (KB4015583) - Cumulative | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4015549) - Petya ransomware attack (CVE-2017-0199) | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4015549) - - Petya ransomware attack (CVE-2017-0199) | Windows |
| Internet Explorer Elevation of Privilege Vulnerability for Windows 7 (KB4015549) - Petya ransomware attack (CVE-2017-0199) | Windows |
| LDAP Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4015546) - Petya ransomware attack (CVE-2017-0199) | Windows |
| LDAP Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4015546) - Petya ransomware attack (CVE-2017-0199) | Windows |
| LDAP Elevation of Privilege Vulnerability for Windows 7 (KB4015546) - Petya ransomware attack (CVE-2017-0199) | Windows |
| for Windows 10 Version 1511 for x64-based Systems (KB4015219) - Cumulative | Windows |
| for Windows 10 Version 1511 (KB4015219) - Cumulative | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008 for Windows Server 2008 for x64-based Systems (KB4014652) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008 for Windows Vista for x64-based Systems (KB4014652) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008 for Windows Server 2008 (KB4014652) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008 for Windows Vista (KB4014652) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008: april 11, 2017 for Windows Server 2008 for x64-based Systems (KB4015383) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008: april 11, 2017 for Windows Server 2008 (KB4015383) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008: april 11, 2017 for Windows Vista for x64-based Systems (KB4015383) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability in windows vista and windows server 2008: april 11, 2017 for Windows Vista (KB4015383) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability for microsoft silverlight 5: april 11, 2017 for Microsoft Silverlight (KB4017094) | Windows |
| libjpeg Information Disclosure Vulnerability for the libjpeg information disclosure vulnerability for microsoft silverlight 5: april 11, 2017 for Microsoft Silverlight x64 (KB4017094) | Windows |
| Updates for Google Chrome (66.0.3359.170) | Windows |
| Updates for Google Chrome (x64) (66.0.3359.170) | Windows |
| Updates for Google Chrome (66.0.3359.181) | Windows |
| Updates for Google Chrome (x64) (66.0.3359.181) | Windows |
| Updates for Google Chrome (67.0.3396.62) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.62) | Windows |
| Updates for Google Chrome (67.0.3396.79) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.79) | Windows |
| Updates for Google Chrome (67.0.3396.87) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.87) | Windows |
| Google Chrome (67.0.3396.99) | Windows |
| Google Chrome (x64) (67.0.3396.99) | Windows |
| for Windows 10 (KB4015221) | Windows |
| Multiple vulnerabilities fixed in Chrome (x64) 31.0.1650.48 | Windows |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 24.1 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 25.99 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 24.1 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 25.99 | Windows |
| Vulnerabilities CVE-2013-6629 are affected in Mozilla Firefox ESR (x64) 24.1 | Windows |
| Vulnerabilities CVE-2013-6629 are affected in Mozilla Firefox ESR 24.1 | Windows |
| Vulnerabilities CVE-2013-6629 are affected in Mozilla Thunderbird 24.1.99 | Windows |
| Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (126.0) | Mac |
| Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (126.0.1) | Mac |
| Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 24.2 | Mac |
| Multiple vulnerabilities are fixed in Google Chrome for Mac 31.0.1650.48 | Mac |
| Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.22 | Mac |
| Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 24.2 | Mac |
| library for handling JPEG files (USN-2060-1) libjpeg62_6b1-2ubuntu1.1_i386.deb | Linux |
| library for handling JPEG files (USN-2060-1) libjpeg62_6b1-2ubuntu1.1_amd64.deb | Linux |
| library for handling JPEG files (USN-2060-1) libturbojpeg_1.1.90+svn733-0ubuntu4.3_i386.deb | Linux |
| library for handling JPEG files (USN-2060-1) libturbojpeg_1.1.90+svn733-0ubuntu4.3_amd64.deb | Linux |
| library for handling JPEG files (USN-2060-1) libjpeg-turbo8_1.1.90+svn733-0ubuntu4.3_i386.deb | Linux |
| library for handling JPEG files (USN-2060-1) libjpeg-turbo8_1.1.90+svn733-0ubuntu4.3_amd64.deb | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-1.2.1-3.el6_5.i686.rpm | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-devel-1.2.1-3.el6_5.i686.rpm | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-static-1.2.1-3.el6_5.i686.rpm | Linux |
| Libjpeg-turbo update (CESA-2013:1803) libjpeg-turbo-static-1.2.1-3.el6_5.x86_64.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-1.2.1-3.el6_5.i686.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-1.2.1-3.el6_5.x86_64.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-devel-1.2.1-3.el6_5.i686.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-static-1.2.1-3.el6_5.i686.rpm | Linux |
| (RHSA-2013:1803) Moderate: libjpeg-turbo security update libjpeg-turbo-static-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo update (ELSA-2013-1803) libjpeg-turbo-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo-devel update (ELSA-2013-1803) libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo-static update (ELSA-2013-1803) libjpeg-turbo-static-1.2.1-3.el6_5.x86_64.rpm | Linux |
| Libjpeg-turbo update (ELSA-2013-1803) libjpeg-turbo-1.2.1-3.el6_5.i686.rpm | Linux |
| Libjpeg-turbo-devel update (ELSA-2013-1803) libjpeg-turbo-devel-1.2.1-3.el6_5.i686.rpm | Linux |
| Libjpeg-turbo-static update (ELSA-2013-1803) libjpeg-turbo-static-1.2.1-3.el6_5.i686.rpm | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Ubuntu) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Debian) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Debian) | Linux |
| Google Chrome (67.0.3396.99) (For Debian) | Linux |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 (For Debian) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Centos) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Centos) | Linux |
| Google Chrome (67.0.3396.99) (For Centos) | Linux |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 (For Centos) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For RedHat) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For RedHat) | Linux |
| Google Chrome (67.0.3396.99) (For RedHat) | Linux |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 (For RedHat) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Suse) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Suse) | Linux |
| Google Chrome (67.0.3396.99) (For Suse) | Linux |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 (For Suse) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Ubuntu) | Linux |
| Google Chrome (67.0.3396.99) (For Ubuntu) | Linux |
| Multiple vulnerabilities fixed in Chrome 31.0.1650.48 (For Ubuntu) | Linux |
| Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6629) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-22220 | April, 2017 Security Monthly Quality Rollup for Windows Server 2012 (KB4015551) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22280 | April, 2017 Security Only Quality Update for Windows Server 2012 (KB4015548) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22219 | April, 2017 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB4015550) |
| PATCH-22218 | April, 2017 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4015550) |
| PATCH-22217 | April, 2017 Security Monthly Quality Rollup for Windows 8.1 (KB4015550) |
| PATCH-22279 | April, 2017 Security Only Quality Update for Windows Server 2012 R2 (KB4015547) |
| PATCH-22278 | April, 2017 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4015547) |
| PATCH-22277 | April, 2017 Security Only Quality Update for Windows 8.1 (KB4015547) |
| PATCH-22341 | Cumulative Update for Windows 10 for x64-based Systems (KB4015221) |
| PATCH-22258 | Cumulative Update for Windows Server 2016 for x64-based Systems (KB4015217) |
| PATCH-22257 | Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4015217) |
| PATCH-22256 | Cumulative Update for Windows 10 Version 1607 (KB4015217) |
| PATCH-22216 | April, 2017 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4015549) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22215 | April, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4015549) - - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22214 | April, 2017 Security Monthly Quality Rollup for Windows 7 (KB4015549) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22276 | April, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4015546) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22275 | April, 2017 Security Only Quality Update for Windows 7 for x64-based Systems (KB4015546) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22274 | April, 2017 Security Only Quality Update for Windows 7 (KB4015546) - Petya ransomware attack (CVE-2017-0199) |
| PATCH-22255 | Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4015219) |
| PATCH-22254 | Cumulative Update for Windows 10 Version 1511 (KB4015219) |
| PATCH-22331 | Security Update for Windows Server 2008 for x64-based Systems (KB4014652) |
| PATCH-22329 | Security Update for Windows Server 2008 (KB4014652) |
| PATCH-22304 | Security Update for Windows Server 2008 for x64-based Systems (KB4015383) |
| PATCH-22302 | Security Update for Windows Server 2008 (KB4015383) |
| PATCH-22303 | Security Update for Windows Vista for x64-based Systems (KB4015383) |
| PATCH-22301 | Security Update for Windows Vista (KB4015383) |
| PATCH-307513 | Updates for Google Chrome (66.0.3359.170) |
| PATCH-307515 | Updates for Google Chrome (x64) (66.0.3359.170) |
| PATCH-307534 | Updates for Google Chrome (66.0.3359.181) |
| PATCH-307535 | Updates for Google Chrome (x64) (66.0.3359.181) |
| PATCH-307607 | Updates for Google Chrome (67.0.3396.62) |
| PATCH-307608 | Updates for Google Chrome (x64) (67.0.3396.62) |
| PATCH-307641 | Updates for Google Chrome (67.0.3396.79) |
| PATCH-307644 | Updates for Google Chrome (x64) (67.0.3396.79) |
| PATCH-307660 | Updates for Google Chrome (67.0.3396.87) |
| PATCH-307662 | Updates for Google Chrome (x64) (67.0.3396.87) |
| PATCH-307715 | Google Chrome (67.0.3396.99) |
| PATCH-307716 | Google Chrome (x64) (67.0.3396.99) |
| PATCH-22340 | Cumulative Update for Windows 10 (KB4015221) |
| PATCH-313162 | Google Chrome (x64) (80.0.3987.132) |
| PATCH-313161 | Google Chrome (80.0.3987.132) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611807 | Mozilla Thunderbird For Mac (142.0) |
| PATCH-611995 | Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133) |
| PATCH-611088 | SeaMonkey For Mac (2.53.21) |
| PATCH-612783 | Mozilla Firefox For Mac (145.0.1) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234