CVE

Id
70460  
CVE No.
CVE-2014-3165  
Status
Candidate  
Description
Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an unexpectedly long lifetime of a temporary object during method completion.  
Phase
Assigned (20140503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
670200 70460 CVE-2014-3165 CONFIRM:http://googlechromereleases.blogspot.com/2014/08/stable-channel-update.html  View
670201 70460 CVE-2014-3165 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=390174  View
670202 70460 CVE-2014-3165 CONFIRM:https://src.chromium.org/viewvc/blink?revision=177359&view=revision  View
670203 70460 CVE-2014-3165 DEBIAN:DSA-3039  View
670204 70460 CVE-2014-3165 URL:http://www.debian.org/security/2014/dsa-3039  View
670205 70460 CVE-2014-3165 GENTOO:GLSA-201408-16  View
670206 70460 CVE-2014-3165 URL:http://security.gentoo.org/glsa/glsa-201408-16.xml  View
670207 70460 CVE-2014-3165 BID:69201  View
670208 70460 CVE-2014-3165 URL:http://www.securityfocus.com/bid/69201  View
670209 70460 CVE-2014-3165 SECTRACK:1030732  View
670210 70460 CVE-2014-3165 URL:http://www.securitytracker.com/id/1030732  View
670211 70460 CVE-2014-3165 SECUNIA:60798  View
670212 70460 CVE-2014-3165 URL:http://secunia.com/advisories/60798  View
670213 70460 CVE-2014-3165 SECUNIA:59904  View
670214 70460 CVE-2014-3165 URL:http://secunia.com/advisories/59904  View
670215 70460 CVE-2014-3165 XF:google-chrome-cve20143165-code-exec(95247)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15096 JVNDB-2014-003971 Google Chrome の WebGL の実装におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の WebGL の実装は、clear 呼び出しと描画バッファの状態との適切な対話処理を確認しないため、サービス運用妨害 (初期化されていないメモリの読み込み) 状態にされる脆弱性が存在します。 CVE-2014-3173 70460 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003971.html  View