Design/Logic Flaw

2014-03-1614:06:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.5%

JSON

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

CPENameOperatorVersion
chromeeq33.0.1750.1
chromeeq33.0.1750.89
chromeeq33.0.1750.51
chromeeq33.0.1750.117
chromeeq33.0.1750.44
chromeeq33.0.1750.144
chromeeq33.0.1750.39
chromeeq33.0.1750.73
chromeeq33.0.1750.133
chromeeq33.0.1750.70

Name	Operator	Version
chrome	eq	33.0.1750.1
chrome	eq	33.0.1750.89
chrome	eq	33.0.1750.51
chrome	eq	33.0.1750.117
chrome	eq	33.0.1750.44
chrome	eq	33.0.1750.144
chrome	eq	33.0.1750.39
chrome	eq	33.0.1750.73
chrome	eq	33.0.1750.133
chrome	eq	33.0.1750.70