Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 30.0.1599.65 (including) | |
| Chrome | 30.0.1599.0 (including) | 30.0.1599.0 (including) | |
| Chrome | 30.0.1599.1 (including) | 30.0.1599.1 (including) | |
| Chrome | 30.0.1599.2 (including) | 30.0.1599.2 (including) | |
| Chrome | 30.0.1599.4 (including) | 30.0.1599.4 (including) | |
| Chrome | 30.0.1599.5 (including) | 30.0.1599.5 (including) | |
| Chrome | 30.0.1599.6 (including) | 30.0.1599.6 (including) | |
| Chrome | 30.0.1599.7 (including) | 30.0.1599.7 (including) | |
| Chrome | 30.0.1599.8 (including) | 30.0.1599.8 (including) | |
| Chrome | 30.0.1599.9 (including) | 30.0.1599.9 (including) | |
| Chrome | 30.0.1599.10 (including) | 30.0.1599.10 (including) | |
| Chrome | 30.0.1599.11 (including) | 30.0.1599.11 (including) | |
| Chrome | 30.0.1599.12 (including) | 30.0.1599.12 (including) | |
| Chrome | 30.0.1599.13 (including) | 30.0.1599.13 (including) | |
| Chrome | 30.0.1599.14 (including) | 30.0.1599.14 (including) | |
| Chrome | 30.0.1599.15 (including) | 30.0.1599.15 (including) | |
| Chrome | 30.0.1599.16 (including) | 30.0.1599.16 (including) | |
| Chrome | 30.0.1599.17 (including) | 30.0.1599.17 (including) | |
| Chrome | 30.0.1599.18 (including) | 30.0.1599.18 (including) | |
| Chrome | 30.0.1599.19 (including) | 30.0.1599.19 (including) | |
| Chrome | 30.0.1599.20 (including) | 30.0.1599.20 (including) | |
| Chrome | 30.0.1599.21 (including) | 30.0.1599.21 (including) | |
| Chrome | 30.0.1599.22 (including) | 30.0.1599.22 (including) | |
| Chrome | 30.0.1599.23 (including) | 30.0.1599.23 (including) | |
| Chrome | 30.0.1599.24 (including) | 30.0.1599.24 (including) | |
| Chrome | 30.0.1599.25 (including) | 30.0.1599.25 (including) | |
| Chrome | 30.0.1599.26 (including) | 30.0.1599.26 (including) | |
| Chrome | 30.0.1599.27 (including) | 30.0.1599.27 (including) | |
| Chrome | 30.0.1599.28 (including) | 30.0.1599.28 (including) | |
| Chrome | 30.0.1599.29 (including) | 30.0.1599.29 (including) | |
| Chrome | 30.0.1599.30 (including) | 30.0.1599.30 (including) | |
| Chrome | 30.0.1599.31 (including) | 30.0.1599.31 (including) | |
| Chrome | 30.0.1599.32 (including) | 30.0.1599.32 (including) | |
| Chrome | 30.0.1599.33 (including) | 30.0.1599.33 (including) | |
| Chrome | 30.0.1599.34 (including) | 30.0.1599.34 (including) | |
| Chrome | 30.0.1599.35 (including) | 30.0.1599.35 (including) | |
| Chrome | 30.0.1599.36 (including) | 30.0.1599.36 (including) | |
| Chrome | 30.0.1599.37 (including) | 30.0.1599.37 (including) | |
| Chrome | 30.0.1599.38 (including) | 30.0.1599.38 (including) | |
| Chrome | 30.0.1599.39 (including) | 30.0.1599.39 (including) | |
| Chrome | 30.0.1599.40 (including) | 30.0.1599.40 (including) | |
| Chrome | 30.0.1599.41 (including) | 30.0.1599.41 (including) | |
| Chrome | 30.0.1599.42 (including) | 30.0.1599.42 (including) | |
| Chrome | 30.0.1599.43 (including) | 30.0.1599.43 (including) | |
| Chrome | 30.0.1599.44 (including) | 30.0.1599.44 (including) | |
| Chrome | 30.0.1599.47 (including) | 30.0.1599.47 (including) | |
| Chrome | 30.0.1599.48 (including) | 30.0.1599.48 (including) | |
| Chrome | 30.0.1599.49 (including) | 30.0.1599.49 (including) | |
| Chrome | 30.0.1599.50 (including) | 30.0.1599.50 (including) | |
| Chrome | 30.0.1599.51 (including) | 30.0.1599.51 (including) | |
| Chrome | 30.0.1599.52 (including) | 30.0.1599.52 (including) | |
| Chrome | 30.0.1599.53 (including) | 30.0.1599.53 (including) | |
| Chrome | 30.0.1599.56 (including) | 30.0.1599.56 (including) | |
| Chrome | 30.0.1599.57 (including) | 30.0.1599.57 (including) | |
| Chrome | 30.0.1599.58 (including) | 30.0.1599.58 (including) | |
| Chrome | 30.0.1599.59 (including) | 30.0.1599.59 (including) | |
| Chrome | 30.0.1599.60 (including) | 30.0.1599.60 (including) | |
| Chrome | 30.0.1599.61 (including) | 30.0.1599.61 (including) | |
| Chrome | 30.0.1599.64 (including) | 30.0.1599.64 (including) | |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | quantal | * |
| Chromium-browser | Ubuntu | raring | * |
| Chromium-browser | Ubuntu | saucy | * |
| Chromium-browser | Ubuntu | upstream | * |
References
- http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://support.apple.com/kb/HT6162
- http://support.apple.com/kb/HT6163
- http://www.debian.org/security/2013/dsa-2785
- https://code.google.com/p/chromium/issues/detail?id=265838
- https://code.google.com/p/chromium/issues/detail?id=279277
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19012
- https://src.chromium.org/viewvc/blink?revision=156580\u0026view=revision
- https://support.apple.com/kb/HT6537
- http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html
- http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
- http://support.apple.com/kb/HT6162
- http://support.apple.com/kb/HT6163
- http://www.debian.org/security/2013/dsa-2785
- https://code.google.com/p/chromium/issues/detail?id=265838
- https://code.google.com/p/chromium/issues/detail?id=279277
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19012
- https://src.chromium.org/viewvc/blink?revision=156580\u0026view=revision
- https://support.apple.com/kb/HT6537