CVE-2014-1743

High

Published: 21/05/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the StyleElement::removedFromDocument function in Blink, used in Google Chrome before version 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.

Risk Assessment

An attacker could exploit this vulnerability to remotely crash the browser, leading to service disruption for users.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor applications for suspicious JavaScript activity.

Other vulnerabilities in Google Chrome (przed wersją 35.0.1916.114)

CVE-2014-1745High
A use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before version 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object.

Original NVD description (English source)

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.