CVE-2014-7929

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in the DOM implementation in Blink, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of web applications. There is also a risk of unspecified impacts that could affect data security.

Recommendation

It is recommended to update Google Chrome to version 40.0.2214.91 or later to mitigate this vulnerability.

Other vulnerabilities in Google Chrome (przed wersją 40.0.2214.91)

CVE-2014-7932High
Use-after-free vulnerability in the Element::detach function in the DOM implementation in Blink, used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.

Original NVD description (English source)

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.