CVE-2013-6629 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Affected Products (NVD)

Vendor	Product	Version
google	chrome	𝑥 < 31.0.1650.48
oracle	solaris	11.3
artifex	gpl_ghostscript	𝑥 < 9.03
libjpeg-turbo	libjpeg-turbo	𝑥 < 1.3.1
opensuse	opensuse	12.2
opensuse	opensuse	12.3
opensuse	opensuse	13.1
canonical	ubuntu_linux	10.04
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.04
canonical	ubuntu_linux	13.10
debian	debian_linux	7.0
debian	debian_linux	8.0
mozilla	firefox	𝑥 < 24.2
mozilla	firefox	𝑥 < 26.0
mozilla	seamonkey	𝑥 < 2.23
mozilla	thunderbird	𝑥 < 24.2.0

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64, x86)	KB4015221
1511 (x64, x86)	KB4015219
1607 (x64, x86)	KB4015217
1703 (x64, x86)	KB4015583

Windows 7

Service Pack 1 (x64, x86)

Windows 8.1

(x64, x86)

Windows RT 8.1

All

Windows Server 2008

Service Pack 2 (x64, x86)	KB4015383
Service Pack 2 Server Core (x64)	KB4015383

Windows Server 2008 R2

Service Pack 1 (x64)	KB4015549
Service Pack 1 Server Core (x64)	KB4015549

Windows Server 2012

Server Core	KB4015551
Standard	KB4015551

Windows Server 2012 R2

Server Core	KB4015550
Standard	KB4015550

Windows Server 2016

Server Core	KB4015217
Standard	KB4015217

Windows Vista

Service Pack 2	KB4015383
x64 Edition	KB4015383

Debian Releases

Debian Product

Codename

libjpeg-turbo

bookworm	1:2.1.5-2 fixed
bullseye	1:2.0.6-4 fixed
sid	1:2.1.5-3 fixed
squeeze	no-dsa
trixie	1:2.1.5-3 fixed

libjpeg6b

sid	1:6b2-3.1 fixed
squeeze	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

firefox

lucid	ignored
precise	Fixed 26.0+build2-0ubuntu0.12.04.2 released
quantal	Fixed 26.0+build2-0ubuntu0.12.10.2 released
raring	Fixed 26.0+build2-0ubuntu0.13.04.2 released
saucy	Fixed 26.0+build2-0ubuntu0.13.10.2 released

libjpeg-turbo

lucid	dne
precise	Fixed 1.1.90+svn733-0ubuntu4.3 released
quantal	Fixed 1.2.1-0ubuntu2.12.10.1 released
raring	Fixed 1.2.1-0ubuntu2.13.04.1 released
saucy	Fixed 1.3.0-0ubuntu1.1 released

libjpeg6b

lucid	Fixed 6b-15ubuntu1.1 released
precise	Fixed 6b1-2ubuntu1.1 released
quantal	Fixed 6b1-2ubuntu2.1 released
raring	Fixed 6b1-3ubuntu1.13.04.1 released
saucy	Fixed 6b1-3ubuntu1.13.10.1 released

openjdk-7

lucid	dne
precise	ignored
quantal	ignored
saucy	ignored
trusty	dne

thunderbird

lucid	ignored
precise	Fixed 1:24.2.0+build1-0ubuntu0.12.04.1 released
quantal	Fixed 1:24.2.0+build1-0ubuntu0.12.10.1 released
raring	Fixed 1:24.2.0+build1-0ubuntu0.13.04.1 released
saucy	Fixed 1:24.2.0+build1-0ubuntu0.13.10.1 released

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://advisories.mageia.org/MGASA-2013-0333.html

http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html

http://bugs.ghostscript.com/show_bug.cgi?id=686980

http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html

http://marc.info/?l=bugtraq&m=140852886808946&w=2

http://marc.info/?l=bugtraq&m=140852974709252&w=2

http://rhn.redhat.com/errata/RHSA-2013-1803.html

http://rhn.redhat.com/errata/RHSA-2013-1804.html

http://secunia.com/advisories/56175

http://secunia.com/advisories/58974

http://secunia.com/advisories/59058

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://support.apple.com/kb/HT6150

http://support.apple.com/kb/HT6162

http://support.apple.com/kb/HT6163

http://www-01.ibm.com/support/docview.wss?uid=swg21672080

http://www-01.ibm.com/support/docview.wss?uid=swg21676746

http://www.debian.org/security/2013/dsa-2799

http://www.mandriva.com/security/advisories?name=MDVSA-2013:273

http://www.mozilla.org/security/announce/2013/mfsa2013-116.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

http://www.securityfocus.com/bid/63676

http://www.securitytracker.com/id/1029470

http://www.securitytracker.com/id/1029476

http://www.ubuntu.com/usn/USN-2052-1

http://www.ubuntu.com/usn/USN-2053-1

http://www.ubuntu.com/usn/USN-2060-1

https://access.redhat.com/errata/RHSA-2014:0413

https://access.redhat.com/errata/RHSA-2014:0414

https://bugzilla.mozilla.org/show_bug.cgi?id=891693

https://code.google.com/p/chromium/issues/detail?id=258723

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2013-6629

https://security.gentoo.org/glsa/201606-03

https://src.chromium.org/viewvc/chrome?revision=229729&view=revision

https://www.ibm.com/support/docview.wss?uid=swg21675973

http://advisories.mageia.org/MGASA-2013-0333.html

http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html

http://bugs.ghostscript.com/show_bug.cgi?id=686980

http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html

http://marc.info/?l=bugtraq&m=140852886808946&w=2

http://marc.info/?l=bugtraq&m=140852974709252&w=2

http://rhn.redhat.com/errata/RHSA-2013-1803.html

http://rhn.redhat.com/errata/RHSA-2013-1804.html

http://secunia.com/advisories/56175

http://secunia.com/advisories/58974

http://secunia.com/advisories/59058

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://support.apple.com/kb/HT6150

http://support.apple.com/kb/HT6162

http://support.apple.com/kb/HT6163

http://www-01.ibm.com/support/docview.wss?uid=swg21672080

http://www-01.ibm.com/support/docview.wss?uid=swg21676746

http://www.debian.org/security/2013/dsa-2799

http://www.mandriva.com/security/advisories?name=MDVSA-2013:273

http://www.mozilla.org/security/announce/2013/mfsa2013-116.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

http://www.securityfocus.com/bid/63676

http://www.securitytracker.com/id/1029470

http://www.securitytracker.com/id/1029476

http://www.ubuntu.com/usn/USN-2052-1

http://www.ubuntu.com/usn/USN-2053-1

http://www.ubuntu.com/usn/USN-2060-1

https://access.redhat.com/errata/RHSA-2014:0413

https://access.redhat.com/errata/RHSA-2014:0414

https://bugzilla.mozilla.org/show_bug.cgi?id=891693

https://code.google.com/p/chromium/issues/detail?id=258723

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2013-6629

https://security.gentoo.org/glsa/201606-03

https://src.chromium.org/viewvc/chrome?revision=229729&view=revision

https://www.ibm.com/support/docview.wss?uid=swg21675973