QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1743

Published: May 21, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_DEBIAN

http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

third-party-advisory

x_refsource_SECUNIA

openSUSE-SU-2014:0783

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

https://code.google.com/p/chromium/issues/detail?id=356653

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

https://src.chromium.org/viewvc/blink?revision=170702&view=revision

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.