Security Vulnerabilities fixed in Firefox 26

Description

Google security researcher Michal Zalewski reported issues with JPEG format image processing with Start Of Scan (SOS) and Define Huffman Table (DHT) markers in the libjpeg library. This could allow for the possible reading of arbitrary memory content as well as cross-domain image theft.

Affected Applications

Firefox

CVE References

CVE-2013-6630 CVE-2013-6629

Other References

https://www.mozilla.org/en-US/security/advisories/mfsa2013-116