Information disclosure vulnerability in Google Chrome via a crafted JPEG image (dpkg)ID: oval:org.secpod.oval:def:16036 | Date: (C)2013-11-26 (M)2023-12-26 |
Class: VULNERABILITY | Family: unix |
The host is installed with Google Chrome before 31.0.1650.48 and is prone to an information disclosure vulnerability. The flaw is present in get_dht function in jdmarker.c, which fails to properly handle the Huffman value array. Successful exploitation allows remote attackers to obtain sensitive information from uninitialized memory locations.