Design/Logic Flaw

2014-05-2111:14:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

CPENameOperatorVersion
chromele35.0.1916.113
chromeeq35.0.1916.99
chromeeq35.0.1916.57
chromeeq35.0.1916.3
chromeeq35.0.1916.38
chromeeq35.0.1916.105
chromeeq35.0.1916.95
chromeeq35.0.1916.52
chromeeq35.0.1916.82
chromeeq35.0.1916.42

Name	Operator	Version
chrome	le	35.0.1916.113
chrome	eq	35.0.1916.99
chrome	eq	35.0.1916.57
chrome	eq	35.0.1916.3
chrome	eq	35.0.1916.38
chrome	eq	35.0.1916.105
chrome	eq	35.0.1916.95
chrome	eq	35.0.1916.52
chrome	eq	35.0.1916.82
chrome	eq	35.0.1916.42