CVE-2013-6654
Google Chrome < 33.0.1750.117 - Denial of Service in SVGAnimateElement
Title source: llmDescription
The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors.
References (5)
Core 5
Core References
Patch x_refsource_confirm
https://src.chromium.org/viewvc/blink?revision=165009&view=revision
Vendor Advisory x_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=333176
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-2883
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html
Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html
Scores
EPSS
0.0131
EPSS Percentile
67.3%
Details
CWE
CWE-20
Status
published
Products (50)
google/chrome
33.0.1750.0
google/chrome
33.0.1750.1
google/chrome
33.0.1750.2
google/chrome
33.0.1750.3
google/chrome
33.0.1750.4
google/chrome
33.0.1750.5
google/chrome
33.0.1750.6
google/chrome
33.0.1750.7
google/chrome
33.0.1750.8
google/chrome
33.0.1750.9
... and 40 more
Published
Feb 24, 2014
Tracked Since
Feb 18, 2026