CVE-2013-6649
N/A
Published: January 28, 2014 at 11:00 AM UTC
Updated: June 17, 2026 at 12:00 AM UTC
3 products affected across 3 vendorsDebian LinuxChromeopenSUSE
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%v ≤ 32.0.1700.10132.0.1700.032.0.1700.1032.0.1700.10032.0.1700.1132.0.1700.1232.0.1700.1332.0.1700.1432.0.1700.1532.0.1700.1632.0.1700.1732.0.1700.1832.0.1700.1932.0.1700.232.0.1700.2132.0.1700.2232.0.1700.2332.0.1700.2432.0.1700.2632.0.1700.2732.0.1700.2832.0.1700.2932.0.1700.332.0.1700.3032.0.1700.3132.0.1700.3232.0.1700.3332.0.1700.3432.0.1700.3532.0.1700.3832.0.1700.3932.0.1700.432.0.1700.4132.0.1700.532.0.1700.5032.0.1700.5132.0.1700.5232.0.1700.5332.0.1700.5432.0.1700.5532.0.1700.5632.0.1700.5732.0.1700.5832.0.1700.5932.0.1700.632.0.1700.6232.0.1700.6332.0.1700.6432.0.1700.6532.0.1700.6632.0.1700.6732.0.1700.6832.0.1700.6932.0.1700.732.0.1700.7032.0.1700.7132.0.1700.7232.0.1700.7432.0.1700.7532.0.1700.7632.0.1700.7732.0.1700.832.0.1700.932.0.1700.9432.0.1700.9532.0.1700.9632.0.1700.9732.0.1700.9832.0.1700.99
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.htmlVendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlVendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2014/dsa-2862x_refsource_CONFIRM
Source: [email protected]
https://src.chromium.org/viewvc/blink?revision=164536&view=revisionQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card