Vulnerability in Google Chrome
CVE-2014-3178
Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.
EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome — versions 37.0.2062.0, 37.0.2062.1, 37.0.2062.2
- N/a — versions n/a
References
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_GENTOO)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_XF)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_DEBIAN)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)