NetSight
IP …
high7.5

CVE-2014-3192

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, …

Impact

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary Eus
Version 6.6.z
RedhatEnterprise Linux Workstation Supplementary
Version 6.0
AppleItunes
through 12.1.3
AppleSafari
Versions 6.2.2, 7.1.2, 8.0.2
AppleIphone Os
through 8.1.2
AppleTvos
through 7.0.1
GoogleChrome
through 38.0.2125.7

Weakness classification

CWE-416

References