CVE

Id
62849  
CVE No.
CVE-2013-2902  
Status
Candidate  
Description
Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.  
Phase
Assigned (20130411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
626933 62849 CVE-2013-2902 CONFIRM:http://crbug.com/260105  View
626934 62849 CVE-2013-2902 CONFIRM:http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html  View
626935 62849 CVE-2013-2902 CONFIRM:https://src.chromium.org/viewvc/blink?revision=155043&view=revision  View
626936 62849 CVE-2013-2902 DEBIAN:DSA-2741  View
626937 62849 CVE-2013-2902 URL:http://www.debian.org/security/2013/dsa-2741  View
626938 62849 CVE-2013-2902 OVAL:oval:org.mitre.oval:def:18313  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22854 JVNDB-2013-004429 Google Chrome の Window.prototype オブジェクトの実装におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の Window.prototype オブジェクトの実装には、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2013-2907 62849 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004429.html  View