Vulnerability in Google Chrome
CVE-2014-3171
Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.
EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome — versions 37.0.2062.0, 37.0.2062.1, 37.0.2062.2
- N/a — versions n/a
References
- chrome-cve-admin@google.com (vdb-entry, x_refsource_XF)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
- chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
- chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_GENTOO)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_SUSE)
- chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_SECTRACK)