CVE

Id
62860  
CVE No.
CVE-2013-2913  
Status
Candidate  
Description
Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.  
Phase
Assigned (20130411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
627052 62860 CVE-2013-2913 CONFIRM:http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html  View
627053 62860 CVE-2013-2913 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=278908  View
627054 62860 CVE-2013-2913 CONFIRM:https://src.chromium.org/viewvc/blink?revision=157914&view=revision  View
627055 62860 CVE-2013-2913 DEBIAN:DSA-2785  View
627056 62860 CVE-2013-2913 URL:http://www.debian.org/security/2013/dsa-2785  View
627057 62860 CVE-2013-2913 SUSE:openSUSE-SU-2013:1556  View
627058 62860 CVE-2013-2913 URL:http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html  View
627059 62860 CVE-2013-2913 SUSE:openSUSE-SU-2013:1861  View
627060 62860 CVE-2013-2913 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html  View
627061 62860 CVE-2013-2913 SUSE:openSUSE-SU-2014:0065  View
627062 62860 CVE-2013-2913 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
627063 62860 CVE-2013-2913 OVAL:oval:org.mitre.oval:def:18843  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22865 JVNDB-2013-004440 Google Chrome で使用される Blink の DOM の実装におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Blink の DOM の実装の core/rendering/RenderBlock.cpp 内の RenderBlock::collapseAnonymousBlockChild 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-2918 62860 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004440.html  View