CVE-2014-1745

High

Published: 21/05/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before version 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, potentially affecting the availability of web applications using the Chrome browser.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in Google Chrome (przed wersją 35.0.1916.114)

CVE-2014-1743High
A use-after-free vulnerability in the StyleElement::removedFromDocument function in Blink, used in Google Chrome before version 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.

Original NVD description (English source)

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.