Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving addition of a child node.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | * | 34.0.1847.115 (including) | |
Chromium-browser | Ubuntu | lucid | * |
Chromium-browser | Ubuntu | precise | * |
Chromium-browser | Ubuntu | quantal | * |
Chromium-browser | Ubuntu | saucy | * |
Chromium-browser | Ubuntu | upstream | * |