CVE

Id
70485  
CVE No.
CVE-2014-3190  
Status
Candidate  
Description
Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.  
Phase
Assigned (20140503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
670643 70485 CVE-2014-3190 CONFIRM:http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html  View
670644 70485 CVE-2014-3190 CONFIRM:https://crbug.com/400476  View
670645 70485 CVE-2014-3190 CONFIRM:https://src.chromium.org/viewvc/blink?revision=181234&view=revision  View
670646 70485 CVE-2014-3190 REDHAT:RHSA-2014:1626  View
670647 70485 CVE-2014-3190 URL:http://rhn.redhat.com/errata/RHSA-2014-1626.html  View
670648 70485 CVE-2014-3190 BID:70273  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15709 JVNDB-2014-004584 Google Chrome の PDFium コンポーネントの pdf/instance.cc の Instance::HandleInputEvent 関数におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の PDFium コンポーネントの pdf/instance.cc の Instance::HandleInputEvent 関数は、特定の -1 の値を表示不可エラーコードの代わりに index として解釈するため、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2014-3198 70485 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004584.html  View