4242 matches found
Design/Logic Flaw
Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact ...
CVE-2013-2909
Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...
Design/Logic Flaw
Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML...
Design/Logic Flaw
Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling...
CVE-2013-2909
Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...
CVE-2013-2916
Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...
CVE-2013-2916
CVE-2013-2916 refers to an address bar spoofing vulnerability in Blink/Chrome prior to 30.0.1599.66, where a response with a 204 No Content status and a delay in notifying the user could enable spoofing of the address bar. Publicly documented in Chrome/chromium update notes and openSUSE/Chromium ...
CVE-2013-2906
Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp,...
CVE-2013-2911
CVE-2013-2911 is a use-after-free in Blink's XSLT handling (XSLStyleSheetLibxslt.cpp) affecting Chrome/Chromium around the 30.x line. Public advisories (Debian/openSUSE/NASL entries) list this alongside other 2013-06 vulnerabilities and show mitigations via updating Chromium/Chrome to newer build...
CVE-2013-2922
CVE-2013-2922 describes a use-after-free in Blink’s template element implementation (core/html/HTMLTemplateElement.cpp) used by Chrome up to 30.0.1599.66. Exploitation would require crafted JavaScript operating on a TEMPLATE element and could cause a denial of service or other impact as described...
CVE-2013-2913
CVE-2013-2913 is a use-after-free in Blink’s XMLDocumentParser::append within Chromium-based browsers (Chrome/Chromium 30 era). The flaw in XML document parsing can lead to denial of service or other unspecified impact. Public references in the initial description indicate the issue affected Chro...
CVE-2013-2913
Removed by vendor...
CVE-2013-2922
Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element...
CVE-2013-2921
Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering...
CVE-2013-2909
CVE-2013-2909 is a use-after-free vulnerability in Blink used by Google Chrome prior to 30.0.1599.66. It arises in inline-block rendering for bidirectional Unicode text in an element isolated from its siblings, potentially enabling a remote denial-of-service or other impact. Public references in ...
CVE-2013-2918
CVE-2013-2918 is a Use-after-free in Blink’s DOM implementation (RenderBlock/DOM-related code in core rendering). Connected sources confirm the issue affects Chromium/Google Chrome up to version 30.0.1599.66, with multiple security advisories and vendor updates listing CVE-2013-2918 among the fix...
CVE-2013-2922
Removed by vendor...
CVE-2013-2909
Removed by vendor...