Vulnerability CVE-2014-3168: Information

Description

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.

Severity: HIGH (7.5)

URL: https://nvd.nist.gov/vuln/detail/CVE-2014-3168

Published: Aug. 27, 2014

Modified: Nov. 7, 2023

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
chromium	sisyphus	37.0.2062.94-alt1	124.0.6367.78-alt1	ALT-PU-2014-2044-1	128637	Fixed
chromium	p10	37.0.2062.94-alt1	119.0.6045.159-alt0.p10.1	ALT-PU-2014-2044-1	128637	Fixed
chromium	p9	37.0.2062.94-alt1	97.0.4692.99-alt0.p9.1	ALT-PU-2014-2044-1	128637	Fixed
chromium	c10f1	37.0.2062.94-alt1	110.0.5481.177-alt1.p10.1	ALT-PU-2014-2044-1	128637	Fixed
chromium	c9f2	37.0.2062.94-alt1	84.0.4147.105-alt1.1.p9	ALT-PU-2014-2044-1	128637	Fixed
chromium	c7	38.0.2125.122-alt0.M70C.2	38.0.2125.122-alt0.M70C.2	ALT-PU-2016-1955-1	168870	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://src.chromium.org/viewvc/blink?revision=174923&view=revision
http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html
60424
https://src.chromium.org/viewvc/blink?revision=174338&view=revision
google-chrome-cve20143168-code-exec(95468)
61482
GLSA-201408-16
https://crbug.com/369860
openSUSE-SU-2014:1151
60268
69398
1030767
DSA-3039

Affected configurations:
1. Configuration 1
  cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.60:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.76:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.78:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.69:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.59:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.81:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.73:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.67:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.77:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.9:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.61:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.64:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.8:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.7:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.68:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.62:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.70:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.63:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.75:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.72:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.92:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.71:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.90:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
  End including
  37.0.2062.93
  cpe:2.3:a:google:chrome:37.0.2062.80:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.89:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.66:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.74:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.91:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.65:*:*:*:*:*:*:*
  cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:*
  
  Configuration 2
  cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
  cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Version: v24.4.2

Vulnerability CVE-2014-3168: Information

Description

Fixed packages

References to Advisories, Solutions, and Tools

Configuration 1

Configuration 2