CVE-2014-1713
6.9 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google:chrome | google chrome | lt | 33.0.1750.152 |
| google:chrome | google chrome | lt | 33.0.1750.154 |
References
archives.neohapsis.com/archives/bugtraq/2014-03/0144.html
archives.neohapsis.com/archives/bugtraq/2014-04/0009.html
archives.neohapsis.com/archives/bugtraq/2014-04/0135.html
archives.neohapsis.com/archives/bugtraq/2014-04/0136.html
googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
googlechromereleases.blogspot.com/2014/03/stable-channel-update_14.html
lists.opensuse.org/opensuse-security-announce/2014-04/msg00008.html
security.gentoo.org/glsa/glsa-201408-16.xml
www.debian.org/security/2014/dsa-2883
code.google.com/p/chromium/issues/detail?id=352374
src.chromium.org/viewvc/blink?revision=169176&view=revision
support.apple.com/kb/HT6537
Social References
More
Related
6.9 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%