PT-2014-1064 · Google+3 · Google Chrome+3
Published
2014-03-14
·
Updated
2024-06-15
·
CVE-2014-1713
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.152 on OS X and Linux
Google Chrome versions prior to 33.0.1750.154 on Windows
Description
The issue is related to a use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink. This vulnerability allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the
document.location value.Recommendations
For Google Chrome versions prior to 33.0.1750.152 on OS X and Linux, update to version 33.0.1750.152 or later.
For Google Chrome versions prior to 33.0.1750.154 on Windows, update to version 33.0.1750.154 or later.
As a temporary workaround, consider restricting access to the
document.location value until a patch is available.Exploit
Fix
DoS
RCE
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Google Chrome
Suse
Itunes