CVE-2014-1703 in Chrome
Résumé (Anglaise)
Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Réserver
29/01/2014
Divulgation
16/03/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 12595 | Google Chrome Web Sockets déni de service | 399 | Non prouvée | Correctif officiel | CVE-2014-1703 |