SecuritySpace - CVE-2013-2904

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-2904

Description: Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.

Test IDs: 1.3.6.1.4.1.25623.1.0.702741

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-2904
Debian Security Information: DSA-2741 (Google Search)
http://www.debian.org/security/2013/dsa-2741
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18550

CVE ID:	CVE-2013-2904
Description:	Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.
Test IDs:	1.3.6.1.4.1.25623.1.0.702741
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2904 Debian Security Information: DSA-2741 (Google Search) http://www.debian.org/security/2013/dsa-2741 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18550