VDB

DEBIAN-CVE-2014-1745

DEBIAN-CVE-2014-1745 PUBLISHED CVSS 7.099999904632568 HIGH

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Risk Scores

CVSS v3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Affected Products

VendorProductVersions
Debian:12wpewebkit0, 2.38.6-1, 2.39.91-1
Debian:11wpewebkit2.48.3-1, 2.40.2-2, 0
Debian:12webkit2gtk2.42.0-1, 2.40.3-2~deb11u2, 2.40.3-2~deb12u1
Debian:14webkit2gtk0, 0, 0
Debian:13wpewebkit0, 0, 0
Debian:13webkit2gtk0, 0, 0
Debian:14wpewebkit0, 0, 0
Debian:11webkit2gtk2.40.3-2, 2.40.3-2, 2.40.3-2

Timeline

  • May 21, 2014 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›