Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libjpeg/libjpeg-turbo库内存损坏漏洞
Vulnerability Description
libjpeg是一个包含JPEG解码以及JPEG编码等功能的C语言库。libjpeg-turbo是libjpeg的一个优化改进版本。 Google Chrome 31.0.1650.48之前的版本和Ghostscript软件中使用的libjpeg 6b和libjpeg-turbo 1.3.0及之前的版本中的jdmarker.c文件中的‘get_sos’函数中存在安全漏洞，该漏洞源于程序没有检查重复的组件数据。远程攻击者可借助特制的JPEG图像利用该漏洞获取未初始化内存位置的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A