Description
Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.
References (8)
Core 8
Core References
Exploit x_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=268565
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19006
Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2013/dsa-2799
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html
Scores
EPSS
0.0177
EPSS Percentile
75.6%
Details
CWE
CWE-399
Status
published
Products (49)
debian/debian_linux
7.0
debian/debian_linux
8.0
google/chrome
31.0.1650.0
google/chrome
31.0.1650.2
google/chrome
31.0.1650.3
google/chrome
31.0.1650.4
google/chrome
31.0.1650.5
google/chrome
31.0.1650.6
google/chrome
31.0.1650.7
google/chrome
31.0.1650.8
... and 39 more
Published
Nov 13, 2013
Tracked Since
Feb 18, 2026