Design/Logic Flaw

2013-08-2112:17:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.9%

JSON

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.

CPENameOperatorVersion
debian_linuxeq7.0
chromeeq29.0.1547.0
chromeeq29.0.1547.39
chromeeq29.0.1547.52
chromeeq29.0.1547.15
chromeeq29.0.1547.40
chromeeq29.0.1547.49
chromeeq29.0.1547.2
chromeeq29.0.1547.7
chromeeq29.0.1547.11

Name	Operator	Version
debian_linux	eq	7.0
chrome	eq	29.0.1547.0
chrome	eq	29.0.1547.39
chrome	eq	29.0.1547.52
chrome	eq	29.0.1547.15
chrome	eq	29.0.1547.40
chrome	eq	29.0.1547.49
chrome	eq	29.0.1547.2
chrome	eq	29.0.1547.7
chrome	eq	29.0.1547.11