CVE-2013-6657

Removed by vendor...

CVE-2013-6654

Removed by vendor...

CVE-2013-6658

Removed by vendor...

CVE-2013-6655

Removed by vendor...

CVE-2013-6656: Exposure of Sensitive Information to an Unauthorized Actor

The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive...

CVE-2013-6654: Improper Input Validation

The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service incorrect cast or possibly have unspecified...

CVE-2013-6655: Undefined Security Weakness

Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and...

CVE-2013-6658: Undefined Security Weakness

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving 1 running JavaScript code during execution of the...

PT-2014-3157

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117 Description The issue involves multiple use-after-free vulnerabilities in the layout implementation in Blink. These vulnerabilities can be exploited by remote attackers to cause a denial of service...

PT-2014-3153

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117 Description The issue arises from the SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp within Blink, which is used in Google Chrome. This function does not...

PT-2014-3156

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. This is due to the XSS auditor in Blink inserting the...

PT-2014-3154

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117 Description A use-after-free issue in Blink, used by Google Chrome, allows remote attackers to cause a denial of service or possibly have other unspecified impacts. This issue is related to the...

PT-2014-3155

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117 Description The issue is related to the XSSAuditor::init function in the XSS auditor component of Blink, which improperly processes POST requests. This is done by using the body of a redirecting pa...

CVE-2013-6649

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG...

CVE-2013-6649

CVE-2013-6649 is a use-after-free in Blink’s SVG rendering (RenderSVGImage::paint) affecting Google Chrome before 32.0.1700.102. Publicly referenced advisories confirm the issue resides in the Blink/WebKit SVG implementation and can lead to denial of service or potentially other impact via vector...

CVE-2013-6649

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG...

CVE-2013-6649

Removed by vendor...

CVE-2013-6649: Undefined Security Weakness

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG...

CVE-2013-6641

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or...

CVE-2013-6641

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or...