Описание
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| lucid | ignored | end of life |
| precise | released | 26.0+build2-0ubuntu0.12.04.2 |
| quantal | released | 26.0+build2-0ubuntu0.12.10.2 |
| raring | released | 26.0+build2-0ubuntu0.13.04.2 |
| saucy | released | 26.0+build2-0ubuntu0.13.10.2 |
| upstream | released | 26.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.3.0-0ubuntu2 |
| lucid | DNE | |
| precise | released | 1.1.90+svn733-0ubuntu4.3 |
| quantal | released | 1.2.1-0ubuntu2.12.10.1 |
| raring | released | 1.2.1-0ubuntu2.13.04.1 |
| saucy | released | 1.3.0-0ubuntu1.1 |
| upstream | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6b1-4ubuntu1 |
| lucid | released | 6b-15ubuntu1.1 |
| precise | released | 6b1-2ubuntu1.1 |
| quantal | released | 6b1-2ubuntu2.1 |
| raring | released | 6b1-3ubuntu1.13.04.1 |
| saucy | released | 6b1-3ubuntu1.13.10.1 |
| upstream | released | 6b1-4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1:24.2.0+build1-0ubuntu1 |
| lucid | ignored | end of life |
| precise | released | 1:24.2.0+build1-0ubuntu0.12.04.1 |
| quantal | released | 1:24.2.0+build1-0ubuntu0.12.10.1 |
| raring | released | 1:24.2.0+build1-0ubuntu0.13.04.1 |
| saucy | released | 1:24.2.0+build1-0ubuntu0.13.10.1 |
| upstream | released | 24.2.0 |
Показывать по
5 Medium
CVSS2
Связанные уязвимости
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as ...
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
ELSA-2013-1803: libjpeg-turbo security update (MODERATE)
5 Medium
CVSS2