CVE

Id
66588  
CVE No.
CVE-2013-6641  
Status
Candidate  
Description
Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of the past names map of a FORM element.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
646103 66588 CVE-2013-6641 CONFIRM:http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.html  View
646104 66588 CVE-2013-6641 CONFIRM:https://chromium.googlesource.com/chromium/blink.git/+/1dfd387bd88cc0ebaef3a2302e72ac1c6101b91b  View
646105 66588 CVE-2013-6641 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=326854  View
646106 66588 CVE-2013-6641 DEBIAN:DSA-2862  View
646107 66588 CVE-2013-6641 URL:http://www.debian.org/security/2014/dsa-2862  View
646108 66588 CVE-2013-6641 SUSE:openSUSE-SU-2014:0243  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12326 JVNDB-2014-001201 Google Chrome の Web Worker の実装におけるサービス運用妨害 (DoS) の脆弱性 Windows、Mac OS X および Linux 上で稼働する Google Chrome の Web Worker の実装には、worker プロセスのシャットダウンに関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6646 66588 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001201.html  View