Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 32.0.1700.101 (including) | |
| Chrome | 32.0.1700.0 (including) | 32.0.1700.0 (including) | |
| Chrome | 32.0.1700.2 (including) | 32.0.1700.2 (including) | |
| Chrome | 32.0.1700.3 (including) | 32.0.1700.3 (including) | |
| Chrome | 32.0.1700.4 (including) | 32.0.1700.4 (including) | |
| Chrome | 32.0.1700.5 (including) | 32.0.1700.5 (including) | |
| Chrome | 32.0.1700.6 (including) | 32.0.1700.6 (including) | |
| Chrome | 32.0.1700.7 (including) | 32.0.1700.7 (including) | |
| Chrome | 32.0.1700.8 (including) | 32.0.1700.8 (including) | |
| Chrome | 32.0.1700.9 (including) | 32.0.1700.9 (including) | |
| Chrome | 32.0.1700.10 (including) | 32.0.1700.10 (including) | |
| Chrome | 32.0.1700.11 (including) | 32.0.1700.11 (including) | |
| Chrome | 32.0.1700.12 (including) | 32.0.1700.12 (including) | |
| Chrome | 32.0.1700.13 (including) | 32.0.1700.13 (including) | |
| Chrome | 32.0.1700.14 (including) | 32.0.1700.14 (including) | |
| Chrome | 32.0.1700.15 (including) | 32.0.1700.15 (including) | |
| Chrome | 32.0.1700.16 (including) | 32.0.1700.16 (including) | |
| Chrome | 32.0.1700.17 (including) | 32.0.1700.17 (including) | |
| Chrome | 32.0.1700.18 (including) | 32.0.1700.18 (including) | |
| Chrome | 32.0.1700.19 (including) | 32.0.1700.19 (including) | |
| Chrome | 32.0.1700.21 (including) | 32.0.1700.21 (including) | |
| Chrome | 32.0.1700.22 (including) | 32.0.1700.22 (including) | |
| Chrome | 32.0.1700.23 (including) | 32.0.1700.23 (including) | |
| Chrome | 32.0.1700.24 (including) | 32.0.1700.24 (including) | |
| Chrome | 32.0.1700.26 (including) | 32.0.1700.26 (including) | |
| Chrome | 32.0.1700.27 (including) | 32.0.1700.27 (including) | |
| Chrome | 32.0.1700.28 (including) | 32.0.1700.28 (including) | |
| Chrome | 32.0.1700.29 (including) | 32.0.1700.29 (including) | |
| Chrome | 32.0.1700.30 (including) | 32.0.1700.30 (including) | |
| Chrome | 32.0.1700.31 (including) | 32.0.1700.31 (including) | |
| Chrome | 32.0.1700.32 (including) | 32.0.1700.32 (including) | |
| Chrome | 32.0.1700.33 (including) | 32.0.1700.33 (including) | |
| Chrome | 32.0.1700.34 (including) | 32.0.1700.34 (including) | |
| Chrome | 32.0.1700.35 (including) | 32.0.1700.35 (including) | |
| Chrome | 32.0.1700.38 (including) | 32.0.1700.38 (including) | |
| Chrome | 32.0.1700.39 (including) | 32.0.1700.39 (including) | |
| Chrome | 32.0.1700.41 (including) | 32.0.1700.41 (including) | |
| Chrome | 32.0.1700.50 (including) | 32.0.1700.50 (including) | |
| Chrome | 32.0.1700.51 (including) | 32.0.1700.51 (including) | |
| Chrome | 32.0.1700.52 (including) | 32.0.1700.52 (including) | |
| Chrome | 32.0.1700.53 (including) | 32.0.1700.53 (including) | |
| Chrome | 32.0.1700.54 (including) | 32.0.1700.54 (including) | |
| Chrome | 32.0.1700.55 (including) | 32.0.1700.55 (including) | |
| Chrome | 32.0.1700.56 (including) | 32.0.1700.56 (including) | |
| Chrome | 32.0.1700.57 (including) | 32.0.1700.57 (including) | |
| Chrome | 32.0.1700.58 (including) | 32.0.1700.58 (including) | |
| Chrome | 32.0.1700.59 (including) | 32.0.1700.59 (including) | |
| Chrome | 32.0.1700.62 (including) | 32.0.1700.62 (including) | |
| Chrome | 32.0.1700.63 (including) | 32.0.1700.63 (including) | |
| Chrome | 32.0.1700.64 (including) | 32.0.1700.64 (including) | |
| Chrome | 32.0.1700.65 (including) | 32.0.1700.65 (including) | |
| Chrome | 32.0.1700.66 (including) | 32.0.1700.66 (including) | |
| Chrome | 32.0.1700.67 (including) | 32.0.1700.67 (including) | |
| Chrome | 32.0.1700.68 (including) | 32.0.1700.68 (including) | |
| Chrome | 32.0.1700.69 (including) | 32.0.1700.69 (including) | |
| Chrome | 32.0.1700.70 (including) | 32.0.1700.70 (including) | |
| Chrome | 32.0.1700.71 (including) | 32.0.1700.71 (including) | |
| Chrome | 32.0.1700.72 (including) | 32.0.1700.72 (including) | |
| Chrome | 32.0.1700.74 (including) | 32.0.1700.74 (including) | |
| Chrome | 32.0.1700.75 (including) | 32.0.1700.75 (including) | |
| Chrome | 32.0.1700.76 (including) | 32.0.1700.76 (including) | |
| Chrome | 32.0.1700.77 (including) | 32.0.1700.77 (including) | |
| Chrome | 32.0.1700.94 (including) | 32.0.1700.94 (including) | |
| Chrome | 32.0.1700.95 (including) | 32.0.1700.95 (including) | |
| Chrome | 32.0.1700.96 (including) | 32.0.1700.96 (including) | |
| Chrome | 32.0.1700.97 (including) | 32.0.1700.97 (including) | |
| Chrome | 32.0.1700.98 (including) | 32.0.1700.98 (including) | |
| Chrome | 32.0.1700.99 (including) | 32.0.1700.99 (including) | |
| Chrome | 32.0.1700.100 (including) | 32.0.1700.100 (including) | |
| Chromium-browser | Ubuntu | devel | * |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | quantal | * |
| Chromium-browser | Ubuntu | saucy | * |
| Chromium-browser | Ubuntu | upstream | * |