CVE-2014-1703 in Chrome
Summary
Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/29/2014
Disclosure
03/16/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12595 | Google Chrome Web Sockets resource management | 399 | Unproven | Official fix | CVE-2014-1703 |