Design/Logic Flaw

2014-08-2701:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.9%

JSON

Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.

CPENameOperatorVersion
chromeeq37.0.2062.49
chromeeq37.0.2062.60
chromeeq37.0.2062.44
chromeeq37.0.2062.31
chromeeq37.0.2062.11
chromeeq37.0.2062.51
chromeeq37.0.2062.76
chromeeq37.0.2062.28
chromeeq37.0.2062.48
chromeeq37.0.2062.78

Name	Operator	Version
chrome	eq	37.0.2062.49
chrome	eq	37.0.2062.60
chrome	eq	37.0.2062.44
chrome	eq	37.0.2062.31
chrome	eq	37.0.2062.11
chrome	eq	37.0.2062.51
chrome	eq	37.0.2062.76
chrome	eq	37.0.2062.28
chrome	eq	37.0.2062.48
chrome	eq	37.0.2062.78