CVE:CVE-2013-6629
CNNVD:CNNVD-201311-209
libjpeg是一个包含JPEG解码以及JPEG编码等功能的C语言库。libjpeg-turbo是libjpeg的一个优化改进版本。
Google Chrome 31.0.1650.48之前的版本和Ghostscript软件中使用的libjpeg 6b和libjpeg-turbo 1.3.0及之前的版本中的jdmarker.c文件中的‘get_sos’函数中存在安全漏洞，该漏洞源于程序没有检查重复的组件数据。远程攻击者可借助特制的JPEG图像利用该漏洞获取未初始化内存位置的敏感信息。
solution:Upgrade google chrome to a higher version than 31.0.1650.48,and avoid the version (,31.0.1650.48); Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade artifex gpl_ghostscript to a higher version than 9.03,and avoid the version (,9.03); Upgrade libjpeg-turbo libjpeg-turbo to a higher version than 1.3.1,and avoid the version (,1.3.1); Upgrade fedoraproject fedora to a higher version than 18,19,20,and avoid the version 18,19,20; Upgrade opensuse opensuse to a higher version than 12.2,12.3,13.1,and avoid the version 12.2,12.3,13.1; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,13.10,and avoid the version 10.04,12.04,12.10,13.04,13.10; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade mozilla firefox to a higher version than 26.0,and avoid the version (,26.0); Upgrade mozilla firefox_esr to a higher version than 24.2,and avoid the version (,24.2); Upgrade mozilla seamonkey to a higher version than 2.23,and avoid the version (,2.23); Upgrade mozilla thunderbird to a higher version than 24.2.0,and avoid the version (,24.2.0)