What’s Vulnerable › Vulnerabilities

CVE-2013-6629

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-11-19 · updated 2026-06-17
• Weakness: CWE-200

Description

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Affected products

• Artifex Gpl Ghostscript: before 9.03 — fixed in 9.03
• Canonical Ubuntu Linux: 10.04, 12.04, 12.10, 13.04, 13.10
• Debian Linux: 7.0, 8.0
• Fedoraproject Fedora: 18, 19, 20
• Google Chrome: before 31.0.1650.48 — fixed in 31.0.1650.48
• libjpeg-turbo: before 1.3.1 — fixed in 1.3.1
• Mozilla Firefox: before 24.2; before 26.0 — fixed in 24.2, 26.0
• Mozilla Seamonkey: before 2.23 — fixed in 2.23
• Mozilla Thunderbird: before 24.2.0 — fixed in 24.2.0
• Opensuse: 12.2, 12.3, 13.1
• Oracle Corporation Solaris Operating System: 11.3

How to fix

Upgrade to a fixed version: Artifex Gpl Ghostscript 9.03; Google Chrome 31.0.1650.48; libjpeg-turbo 1.3.1; Mozilla Firefox 24.2, 26.0; Mozilla Seamonkey 2.23; Mozilla Thunderbird 24.2.0. Check the vendor advisory for mitigations.

References

• http://advisories.mageia.org/MGASA-2013-0333.html
• http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html
• http://bugs.ghostscript.com/show_bug.cgi?id=686980
• http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html
• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html

Get alerted when CVE-2013-6629 or the next vulnerability affects your stack