CVE-2014-1713 in Apple iOS

Summary

Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.

Reservation

01/29/2014

Disclosure

03/16/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
13062	Apple iOS WebKit resource management	399	Not defined	Official fix	CVE-2014-1713
12774	WebKit resource management	399	Not defined	Official fix	CVE-2014-1713
12635	Google Chrome Blink Binding resource management	399	Unproven	Official fix	CVE-2014-1713