CVE-2013-6630

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions 1.2.1 through 1.3.0

Description The issue is related to the get dht function in jdmarker.c, which does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers. This allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image. The vulnerability can be exploited remotely and may lead to a violation of confidentiality of protected information.

Recommendations For libjpeg-turbo versions 1.2.1 through 1.3.0, update to a version later than 1.3.0 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.