CVE-2013-6654

The CVE-2013-6654 issue affects Chromium/Blink: The SVGAnimateElement::calculateAnimatedValue function in Blink’s core/svg/SVGAnimateElement.cpp fails to handle unexpected data types, allowing remote attackers to cause a denial of service via an incorrect cast and potentially other impact via unk...

CVE-2013-6657

CVE-2013-6657 affects Blink’s XSS auditor in Google Chrome prior to 33.0.1750.117. The description from multiple sources states that the XSS auditor’s handling of FORM elements within HTTP requests could insert the about:blank URL, enabling a bypass of the Same Origin Policy and allowing a leakag...

CVE-2013-6654

Removed by vendor...

CVE-2013-6658

Removed by vendor...

CVE-2013-6655

Removed by vendor...

CVE-2013-6658

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving 1 running JavaScript code during execution of the...

CVE-2013-6657

Removed by vendor...

CVE-2013-6656

CVE-2013-6656 affects Chrome/Blink: the XSSAuditor in core/html/parser/XSSAuditor.cpp processes POST requests by using the body of a redirecting page instead of the redirect target, enabling an information leak. The CVE is documented as a medium-severity issue (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N...

CVE-2013-6655

Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and...

CVE-2013-6658

CVE-2013-6658 affects Google Chrome Blink: layout implementation vulnerabilities (use-after-free) in updateWidgetPositions. The issues permit remote denial of service and possibly other impact via vectors in updateWidgetPositions, specifically when executing JavaScript during the function or when...

CVE-2013-6649

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG...

CVE-2013-6649

CVE-2013-6649 is a use-after-free in Blink’s SVG rendering (RenderSVGImage::paint) affecting Google Chrome before 32.0.1700.102. Publicly referenced advisories confirm the issue resides in the Blink/WebKit SVG implementation and can lead to denial of service or potentially other impact via vector...

CVE-2013-6649

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG...

CVE-2013-6649

Removed by vendor...

CVE-2013-6641

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or...

CVE-2013-6641

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or...

CVE-2013-6641

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or...

CVE-2013-6641

CVE-2013-6641 is a use-after-free in Blink’s FormAssociatedElement::formRemovedFromTree, affecting Chromium-derived browsers (Chromium/chromium-browser) prior to the patched 32.0.1700.76/77 builds. The vulnerability arises from improper handling of the past names map of a FORM element, enabling r...

CVE-2013-6641

Removed by vendor...

CVE-2013-6635

Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree,...