CVE-2014-1713 in iOS

Résumé

par MITRE

Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 29/01/2014
• Divulgation: 16/03/2014
• Modérer: accepté
• Entrée: 3
• Relier: afficher
• CPE: prêt
• CWE: CWE-399 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.02272
• KEV: non
• Activités: très faible
• Secteur: Homeoffice, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-1713
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-1713
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-1713/