Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 30.0.1599.65 (including) | |
| Chrome | 30.0.1599.0 (including) | 30.0.1599.0 (including) | |
| Chrome | 30.0.1599.1 (including) | 30.0.1599.1 (including) | |
| Chrome | 30.0.1599.2 (including) | 30.0.1599.2 (including) | |
| Chrome | 30.0.1599.4 (including) | 30.0.1599.4 (including) | |
| Chrome | 30.0.1599.5 (including) | 30.0.1599.5 (including) | |
| Chrome | 30.0.1599.6 (including) | 30.0.1599.6 (including) | |
| Chrome | 30.0.1599.7 (including) | 30.0.1599.7 (including) | |
| Chrome | 30.0.1599.8 (including) | 30.0.1599.8 (including) | |
| Chrome | 30.0.1599.9 (including) | 30.0.1599.9 (including) | |
| Chrome | 30.0.1599.10 (including) | 30.0.1599.10 (including) | |
| Chrome | 30.0.1599.11 (including) | 30.0.1599.11 (including) | |
| Chrome | 30.0.1599.12 (including) | 30.0.1599.12 (including) | |
| Chrome | 30.0.1599.13 (including) | 30.0.1599.13 (including) | |
| Chrome | 30.0.1599.14 (including) | 30.0.1599.14 (including) | |
| Chrome | 30.0.1599.15 (including) | 30.0.1599.15 (including) | |
| Chrome | 30.0.1599.16 (including) | 30.0.1599.16 (including) | |
| Chrome | 30.0.1599.17 (including) | 30.0.1599.17 (including) | |
| Chrome | 30.0.1599.18 (including) | 30.0.1599.18 (including) | |
| Chrome | 30.0.1599.19 (including) | 30.0.1599.19 (including) | |
| Chrome | 30.0.1599.20 (including) | 30.0.1599.20 (including) | |
| Chrome | 30.0.1599.21 (including) | 30.0.1599.21 (including) | |
| Chrome | 30.0.1599.22 (including) | 30.0.1599.22 (including) | |
| Chrome | 30.0.1599.23 (including) | 30.0.1599.23 (including) | |
| Chrome | 30.0.1599.24 (including) | 30.0.1599.24 (including) | |
| Chrome | 30.0.1599.25 (including) | 30.0.1599.25 (including) | |
| Chrome | 30.0.1599.26 (including) | 30.0.1599.26 (including) | |
| Chrome | 30.0.1599.27 (including) | 30.0.1599.27 (including) | |
| Chrome | 30.0.1599.28 (including) | 30.0.1599.28 (including) | |
| Chrome | 30.0.1599.29 (including) | 30.0.1599.29 (including) | |
| Chrome | 30.0.1599.30 (including) | 30.0.1599.30 (including) | |
| Chrome | 30.0.1599.31 (including) | 30.0.1599.31 (including) | |
| Chrome | 30.0.1599.32 (including) | 30.0.1599.32 (including) | |
| Chrome | 30.0.1599.33 (including) | 30.0.1599.33 (including) | |
| Chrome | 30.0.1599.34 (including) | 30.0.1599.34 (including) | |
| Chrome | 30.0.1599.35 (including) | 30.0.1599.35 (including) | |
| Chrome | 30.0.1599.36 (including) | 30.0.1599.36 (including) | |
| Chrome | 30.0.1599.37 (including) | 30.0.1599.37 (including) | |
| Chrome | 30.0.1599.38 (including) | 30.0.1599.38 (including) | |
| Chrome | 30.0.1599.39 (including) | 30.0.1599.39 (including) | |
| Chrome | 30.0.1599.40 (including) | 30.0.1599.40 (including) | |
| Chrome | 30.0.1599.41 (including) | 30.0.1599.41 (including) | |
| Chrome | 30.0.1599.42 (including) | 30.0.1599.42 (including) | |
| Chrome | 30.0.1599.43 (including) | 30.0.1599.43 (including) | |
| Chrome | 30.0.1599.44 (including) | 30.0.1599.44 (including) | |
| Chrome | 30.0.1599.47 (including) | 30.0.1599.47 (including) | |
| Chrome | 30.0.1599.48 (including) | 30.0.1599.48 (including) | |
| Chrome | 30.0.1599.49 (including) | 30.0.1599.49 (including) | |
| Chrome | 30.0.1599.50 (including) | 30.0.1599.50 (including) | |
| Chrome | 30.0.1599.51 (including) | 30.0.1599.51 (including) | |
| Chrome | 30.0.1599.52 (including) | 30.0.1599.52 (including) | |
| Chrome | 30.0.1599.53 (including) | 30.0.1599.53 (including) | |
| Chrome | 30.0.1599.56 (including) | 30.0.1599.56 (including) | |
| Chrome | 30.0.1599.57 (including) | 30.0.1599.57 (including) | |
| Chrome | 30.0.1599.58 (including) | 30.0.1599.58 (including) | |
| Chrome | 30.0.1599.59 (including) | 30.0.1599.59 (including) | |
| Chrome | 30.0.1599.60 (including) | 30.0.1599.60 (including) | |
| Chrome | 30.0.1599.61 (including) | 30.0.1599.61 (including) | |
| Chrome | 30.0.1599.64 (including) | 30.0.1599.64 (including) | |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | quantal | * |
| Chromium-browser | Ubuntu | raring | * |
| Chromium-browser | Ubuntu | saucy | * |
| Chromium-browser | Ubuntu | upstream | * |