CVE-2013-2903

CVE-2013-2903 is a use-after-free in Blink’s HTMLMediaElement::didMoveToNewDocument. Affected software: Google Chrome (Blink) prior to 29.0.1547.57. Impact stated: remote attackers could cause a denial of service or other unspecified effects by moving audio/video elements between documents. Publi...

CVE-2013-2904

CVE-2013-2904 refers to a use-after-free in XML document parsing within Chromium/Blink (Document::finishedParsing) that could enable a denial of service via an onload handler altering an IFRAME src. The vulnerability was disclosed in the Chrome/Chromium context and is listed among multiple CVEs a...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

CVE-2013-2902

CVE-2013-2902: Use-after-free in Blink's XSLT ProcessingInstruction handling during applyXSLTransform (HTML document or xsl:processing-instruction) may allow remote denial of service or other impact. Affected product: Google Chrome/Blink prior to 29.0.1547.57. Root cause: use-after-free in XSLT p...

CVE-2013-2902

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...

CVE-2013-2904: Undefined Security Weakness

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

CVE-2013-2903: Undefined Security Weakness

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2902: Undefined Security Weakness

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...

PT-2013-4022

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 29.0.1547.57 Description A use-after-free issue exists in the Document::finishedParsing function in Blink, which can be triggered by an onload event that changes an IFRAME element. This event causes the src...

PT-2013-4020

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 29.0.1547.57 Description A use-after-free issue exists in the XSLT ProcessingInstruction implementation in Blink. This issue can be triggered by remote attackers via vectors related to an applyXSLTransform call,...

CVE-2013-2875

core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2013-2875

Removed by vendor...

CVE-2013-2875: Improper Restriction of Operations within the Bounds of a Memory Buffer

core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

Race condition

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5155

CVE-2010-5155 concerns a race condition in Blink Professional 4.6.1 on Windows XP that allows local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution (an argument-switch or KHOBE attack). The vulnerability can enable execution of c...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5155: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1367 · Blink · Blink Professional

Name of the Vulnerable Software and Affected Versions: Blink Professional version 4.6.1 Description: A race condition in Blink Professional on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

PT-2017-16323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera versions prior to 62.0.3202.62 affected versions not specified Description The issue is related to the incorrect application of sandboxing in Blink, which allowed a remote attacker to inject...