CVE:CVE-2013-6630
CNNVD:CNNVD-201311-208
libjpeg是一个包含JPEG解码以及JPEG编码等功能的C语言库。libjpeg-turbo是libjpeg的一个优化改进版本。
Google Chrome 31.0.1650.48之前的版本中使用的libjpeg-turbo库1.3.0及之前的版本中的jdmarker.c文件中的‘get_dht’函数中存在安全漏洞，该漏洞源于当处理Huffman表时，libjpeg-turbo库使用未初始化的内存。远程攻击者可借助特制的JPEG图像利用该漏洞从未初始化内存位置获取敏感信息。
solution:Upgrade google chrome to a higher version than 31.0.1650.47,31.0.1650.0,31.0.1650.2,31.0.1650.3,31.0.1650.4,31.0.1650.5,31.0.1650.6,31.0.1650.7,31.0.1650.8,31.0.1650.9,31.0.1650.10,31.0.1650.11,31.0.1650.12,31.0.1650.13,31.0.1650.14,31.0.1650.15,31.0.1650.16,31.0.1650.17,31.0.1650.18,31.0.1650.19,31.0.1650.20,31.0.1650.22,31.0.1650.23,31.0.1650.25,31.0.1650.26,31.0.1650.27,31.0.1650.28,31.0.1650.29,31.0.1650.30,31.0.1650.31,31.0.1650.32,31.0.1650.33,31.0.1650.34,31.0.1650.35,31.0.1650.36,31.0.1650.37,31.0.1650.38,31.0.1650.39,31.0.1650.41,31.0.1650.42,31.0.1650.43,31.0.1650.44,31.0.1650.45,31.0.1650.46,and avoid the version (,31.0.1650.47],31.0.1650.0,31.0.1650.2,31.0.1650.3,31.0.1650.4,31.0.1650.5,31.0.1650.6,31.0.1650.7,31.0.1650.8,31.0.1650.9,31.0.1650.10,31.0.1650.11,31.0.1650.12,31.0.1650.13,31.0.1650.14,31.0.1650.15,31.0.1650.16,31.0.1650.17,31.0.1650.18,31.0.1650.19,31.0.1650.20,31.0.1650.22,31.0.1650.23,31.0.1650.25,31.0.1650.26,31.0.1650.27,31.0.1650.28,31.0.1650.29,31.0.1650.30,31.0.1650.31,31.0.1650.32,31.0.1650.33,31.0.1650.34,31.0.1650.35,31.0.1650.36,31.0.1650.37,31.0.1650.38,31.0.1650.39,31.0.1650.41,31.0.1650.42,31.0.1650.43,31.0.1650.44,31.0.1650.45,31.0.1650.46