Description
Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.debian.org/security/2014/dsa-2883 ↗
- http://archives.neohapsis.com/archives/bugtraq/2014-03/0144.html ↗
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0136.html ↗
- https://support.apple.com/kb/HT6537 ↗
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0135.html ↗
- http://security.gentoo.org/glsa/glsa-201408-16.xml ↗
- http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00008.html ↗
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html ↗
- https://code.google.com/p/chromium/issues/detail?id=352374 ↗
- http://googlechromereleases.blogspot.com/2014/03/stable-channel-update_14.html ↗
- https://src.chromium.org/viewvc/blink?revision=169176&view=revision ↗