CVE

Id
70463  
CVE No.
CVE-2014-3168  
Status
Candidate  
Description
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.  
Phase
Assigned (20140503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
670254 70463 CVE-2014-3168 CONFIRM:http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html  View
670255 70463 CVE-2014-3168 CONFIRM:https://crbug.com/369860  View
670256 70463 CVE-2014-3168 CONFIRM:https://src.chromium.org/viewvc/blink?revision=174338&view=revision  View
670257 70463 CVE-2014-3168 CONFIRM:https://src.chromium.org/viewvc/blink?revision=174923&view=revision  View
670258 70463 CVE-2014-3168 DEBIAN:DSA-3039  View
670259 70463 CVE-2014-3168 URL:http://www.debian.org/security/2014/dsa-3039  View
670260 70463 CVE-2014-3168 GENTOO:GLSA-201408-16  View
670261 70463 CVE-2014-3168 URL:http://security.gentoo.org/glsa/glsa-201408-16.xml  View
670262 70463 CVE-2014-3168 SUSE:openSUSE-SU-2014:1151  View
670263 70463 CVE-2014-3168 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html  View
670264 70463 CVE-2014-3168 BID:69398  View
670265 70463 CVE-2014-3168 URL:http://www.securityfocus.com/bid/69398  View
670266 70463 CVE-2014-3168 SECTRACK:1030767  View
670267 70463 CVE-2014-3168 URL:http://www.securitytracker.com/id/1030767  View
670268 70463 CVE-2014-3168 SECUNIA:60424  View
670269 70463 CVE-2014-3168 URL:http://secunia.com/advisories/60424  View
670270 70463 CVE-2014-3168 SECUNIA:61482  View
670271 70463 CVE-2014-3168 URL:http://secunia.com/advisories/61482  View
670272 70463 CVE-2014-3168 SECUNIA:60268  View
670273 70463 CVE-2014-3168 URL:http://secunia.com/advisories/60268  View
670274 70463 CVE-2014-3168 XF:google-chrome-cve20143168-code-exec(95468)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15099 JVNDB-2014-003974 Google Chrome における任意のコードを実行される脆弱性 Google Chrome は、拡張機能、IPC、sync API、および Google V8 の相互作用を適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-3176 70463 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003974.html  View