Vulnerability CVE-2014-3192: Information

Description

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Severity: HIGH (7.5)

Fixed packages

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*

      ---

      Configuration 2

      cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:apple:safari:6.2.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

      End including

      8.1.2

      ---

      cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

      End including

      12.1.3

      ---

      cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

      End including

      7.0.1

      ---

      Configuration 3

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

      End including

      38.0.2125.7

      ---