CVE-2013-2911 in Chrome
Summary
Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
04/11/2013
Disclosure
10/02/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9992 | Google Chrome XSLStyleSheetLibxslt.cpp compileStyleSheet resource management | 399 | Proof-of-Concept | Official fix | CVE-2013-2911 |