CVE-2013-6649
Estado: ModificadaAlta (7.5)—
Vulnerabilidad de liberación de recursos en la función RenderSVGImage::paint en core/rendering/svg/RenderSVGImage.cpp de Blink, tal y como se usa en Google Chrome anterior a la versión 32.0.1700.102, permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto y vectores que involucren una imagen SVG de tamaño 0.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.45%
- Percentil entre todas las CVEs puntuadas: 73
- Fecha de la puntuación: 12/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-399
Referencias
- http://crbug.com/330420
- http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html
- http://www.debian.org/security/2014/dsa-2862
- https://src.chromium.org/viewvc/blink?revision=164536&view=revision
- http://crbug.com/330420
- http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html
- http://www.debian.org/security/2014/dsa-2862
- https://src.chromium.org/viewvc/blink?revision=164536&view=revision
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-6649",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-01-28T14:30:33.777",
"references": [
{
"url": "http://crbug.com/330420",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2014/dsa-2862",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://src.chromium.org/viewvc/blink?revision=164536&view=revision",
"source": "cve@mitre.org"
},
{
"url": "http://crbug.com/330420",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2014/dsa-2862",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://src.chromium.org/viewvc/blink?revision=164536&view=revision",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image."
},
{
"lang": "es",
"value": "Vulnerabilidad de liberación de recursos en la función RenderSVGImage::paint en core/rendering/svg/RenderSVGImage.cpp de Blink, tal y como se usa en Google Chrome anterior a la versión 32.0.1700.102, permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto y vectores que involucren una imagen SVG de tamaño 0."
}
],
"lastModified": "2026-06-17T00:00:44.110",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C09FC000-DD26-480F-B2B8-6C6F7C9D169D",
"versionEndIncluding": "32.0.1700.101"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD924DBF-E249-438D-BA2F-3C0BACD414C1"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2933E363-BBA2-4997-B9AA-CDEA26C03EC4"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95EBFD73-F2E0-471F-A523-0EEC46838248"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90C6D8E5-7DA6-4903-AF1B-58DC2EDE38F6"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E51C592D-A265-4B31-A819-E4C4F641F369"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B4D8BFF-466D-4CC5-BE6D-1E8BB13152CA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F37F40B-E221-4004-AE4C-7278F4790E7F"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0B32A24-627C-43B3-B449-4889D07E33A2"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BEBE1C4-591F-4964-A8E4-B568F15B9A6D"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EE2DEA2-C061-4656-9B0F-DB929256C277"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F50887B9-7FF7-40A2-BAC5-62B6FF9CEB92"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75BE8557-F16D-46B9-8B62-7F8D52AEA11A"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBDC0D0A-7FF3-4B36-82D5-85589E81C9EA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43E026DE-9409-47F1-A025-A27B3A9B7C7B"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07AF7FAC-1199-4C54-827F-3D393BBDC378"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80024D3E-1CDC-400B-A472-7C80607E8E83"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ECF96A3-6D1E-4EF5-8C15-3B56CBD66E1E"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84D88DB7-F6DF-43BA-8259-FEB9EE68AB57"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C65F6423-4B98-468D-AE3F-371B557BBCBA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "862CB0B0-BD74-4DF0-A01C-CAAB376A3DD8"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F61BAD72-0D19-4065-A209-E8F608EE3393"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39555F26-B98C-4116-B58C-ABD3FFA8D3FB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19493290-8C67-4BBC-85EF-31941711443E"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "485F2654-C86B-4270-9B0D-878B23E4A06F"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF42F96A-120A-4637-8AD3-9CCFD8A185FA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E513EEE-4CC1-470F-A729-1F949720F6AA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B135F7E-E68B-4FDB-96B9-45E920A9FAB7"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F3EFD4E-DE0C-4043-B607-3120A728AAB7"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF7547FA-E82F-4E9E-AF6C-5A334A7CEAB1"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F1DDC7C-DFA6-4CF6-89E9-FDA0CD9F13D4"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17DFD87F-5F8A-4D61-80AA-B3915378989D"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "779ADDB1-A249-4044-8879-C242E5169308"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A3E8EAB-8EBC-475A-BF2A-F26803ECA550"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E70483EC-39D3-4195-9CDA-E51493A62C29"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37FE96DD-3B47-4700-9CF1-9F4E8808464C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F24F0E17-97FB-4817-A435-1F4DFD2405FC"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3042C392-8F37-48A8-9AA2-BD7B54C34681"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69A55CC7-C7EB-4920-A352-DEBBFE0C4DDC"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8816D214-468E-45B3-B9E0-4C7C47D0CF9D"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0E56356-B560-4608-B9A8-19621F1FC243"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BC53165-76C8-4F29-A22E-98102159835C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73D7800D-0E74-4726-887E-80C8A08EF88C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "260AD062-8509-4822-B5E8-FF126148CD9F"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CC9BFF7-28AE-4D05-8405-0CD6A4CF199A"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA54E045-6D92-479F-B8BB-D578C987EDFB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38088242-60F9-4A19-9FE7-E63A7A70A6D7"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "978BFA68-736E-45C8-AD6B-93C20187DDCB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51641C25-6D29-46A2-BEA4-92FA63800B9C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8080D81C-456B-4912-B023-F40CD63C1E31"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF8B2DEA-4324-4B96-9138-5BD835713191"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.66:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DCC1343-D62F-44C1-8A1B-6A449424F9B8"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0673B28-DEB0-4DB8-95B9-4342CB30E8C5"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16884FC4-C67D-4F30-8207-D4E464676248"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.69:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA14BCBC-7F1C-449F-80FA-0E5F6CFB66CD"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47140ACB-D48B-41EB-BBE7-09226FE85C3E"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD9942E5-BCC5-49FA-BD6C-A8E6DED252DA"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1187F67E-A665-48C8-A2CC-83A7E7A593BB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.74:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CCBDEF8-5EBA-413A-994E-820A84A4C9CB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46DF9112-2DA6-4BA0-83CD-54623A5EC640"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11B6273A-746F-48D7-A59D-6CE87BF9BBF8"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.77:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DF6A0B0-C052-4345-AE73-9C5B63F50354"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.94:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD10821-8B98-466D-98F6-4942DF59416F"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.95:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D932062A-8336-4349-AFE4-7D277E020BEB"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.96:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7922F9B2-C15B-441B-BC9C-4591652BE16D"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.97:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA0B42A0-73B3-4EF8-9C56-6A820EF2CB0C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.98:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3EF1D80-D086-4308-B229-D146A88B5D04"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.99:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C159F4D-E92D-4879-9A6B-56CFB68C683C"
},
{
"criteria": "cpe:2.3:a:google:chrome:32.0.1700.100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CA241EB-7213-4815-A46E-866F4568C8DA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFBF430B-0832-44B0-AA0E-BA9E467F7668"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}