CVE

Id
66572  
CVE No.
CVE-2013-6625  
Status
Candidate  
Description
Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645726 66572 CVE-2013-6625 CONFIRM:http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html  View
645727 66572 CVE-2013-6625 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=295010  View
645728 66572 CVE-2013-6625 CONFIRM:https://src.chromium.org/viewvc/blink?revision=160037&view=revision  View
645729 66572 CVE-2013-6625 CONFIRM:http://support.apple.com/kb/HT6162  View
645730 66572 CVE-2013-6625 CONFIRM:http://support.apple.com/kb/HT6163  View
645731 66572 CVE-2013-6625 CONFIRM:https://support.apple.com/kb/HT6537  View
645732 66572 CVE-2013-6625 APPLE:APPLE-SA-2014-04-01-1  View
645733 66572 CVE-2013-6625 URL:http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html  View
645734 66572 CVE-2013-6625 DEBIAN:DSA-2799  View
645735 66572 CVE-2013-6625 URL:http://www.debian.org/security/2013/dsa-2799  View
645736 66572 CVE-2013-6625 SUSE:openSUSE-SU-2013:1776  View
645737 66572 CVE-2013-6625 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html  View
645738 66572 CVE-2013-6625 SUSE:openSUSE-SU-2013:1777  View
645739 66572 CVE-2013-6625 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html  View
645740 66572 CVE-2013-6625 SUSE:openSUSE-SU-2013:1861  View
645741 66572 CVE-2013-6625 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html  View
645742 66572 CVE-2013-6625 SUSE:openSUSE-SU-2014:0065  View
645743 66572 CVE-2013-6625 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
645744 66572 CVE-2013-6625 OVAL:oval:org.mitre.oval:def:19257  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23601 JVNDB-2013-005176 Google Chrome などで使用される libjpeg-turbo の jdmarker.c における重要な情報を取得される脆弱性 Google Chrome およびその他の製品で使用される libjpeg-turbo の jdmarker.c 内の get_dht 関数は、Define Huffman Table (DHT) JPEG マーカーに従うセグメントの読み取り中に、特定のハフマン符号の値の配列のすべての要素を設定しないため、初期化されていないメモリ領域から重要な情報を取得される脆弱性が存在します。 CVE-2013-6630 66572 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005176.html  View