CVE-2014-1720

High

Published: 09/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the HTMLBodyElement::insertedInto function in Blink, used in Google Chrome before version 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of web applications and the security of user data.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and reduce the risk of attacks.

Other vulnerabilities in Google Chrome (przed wersją 34.0.1847.116)

CVE-2014-1722High
A use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in Blink, as used in Google Chrome before version 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving addition of a child node.

Original NVD description (English source)

Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.