CVE-2013-2917: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the...

PT-2013-4024

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue is related to multiple race conditions in the Web Audio implementation in Blink. These race conditions can be exploited by remote attackers to cause a denial of service or...

PT-2013-4035

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue is related to the ReverbConvolverStage function in the Web Audio implementation in Blink. It allows remote attackers to cause a denial of service due to an out-of-bounds read v...

PT-2013-4036

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description A use-after-free issue exists in the RenderBlock::collapseAnonymousBlockChild function, which is part of the DOM implementation in Blink. This issue can be exploited by remote attackers ...

PT-2013-4028

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description A use-after-free issue exists in the Web Audio implementation in Blink, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts...

PT-2013-4040

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description A use-after-free issue in the HTMLTemplateElement.cpp component of Blink allows remote attackers to cause a denial of service or possibly have other unspecified impacts via crafted...

PT-2013-4039

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description A double free vulnerability exists in the ResourceFetcher::didLoadResource function in the resource loader in Blink. This issue can be triggered by remote attackers through certain...

PT-2013-4027

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability in Blink, which can be exploited by remote attackers to cause a denial of service or...

CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

Design/Logic Flaw

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

Design/Logic Flaw

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

Design/Logic Flaw

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...

CVE-2013-2902

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...

CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

CVE-2013-2903

CVE-2013-2903 is a use-after-free in Blink’s HTMLMediaElement::didMoveToNewDocument. Affected software: Google Chrome (Blink) prior to 29.0.1547.57. Impact stated: remote attackers could cause a denial of service or other unspecified effects by moving audio/video elements between documents. Publi...

CVE-2013-2904

CVE-2013-2904 refers to a use-after-free in XML document parsing within Chromium/Blink (Document::finishedParsing) that could enable a denial of service via an onload handler altering an IFRAME src. The vulnerability was disclosed in the Chrome/Chromium context and is listed among multiple CVEs a...