CVEvulnerability

CVE-2013-2902

7.5 HIGH Published 2013-08-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-399

Description

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.

Affected configurations

• google chrome (<= 29.0.1547.56) • google chrome 29.0.1547.0 • google chrome 29.0.1547.1 • google chrome 29.0.1547.2 • google chrome 29.0.1547.3 • google chrome 29.0.1547.4 • google chrome 29.0.1547.5 • google chrome 29.0.1547.7 • google chrome 29.0.1547.8 • google chrome 29.0.1547.9 • google chrome 29.0.1547.10 • google chrome 29.0.1547.11 • google chrome 29.0.1547.12 • google chrome 29.0.1547.13 • google chrome 29.0.1547.14 • google chrome 29.0.1547.15 • google chrome 29.0.1547.16 • google chrome 29.0.1547.17 • google chrome 29.0.1547.18 • google chrome 29.0.1547.19 • google chrome 29.0.1547.20 • google chrome 29.0.1547.21 • google chrome 29.0.1547.22 • google chrome 29.0.1547.23 • google chrome 29.0.1547.27 • google chrome 29.0.1547.28 • google chrome 29.0.1547.29 • google chrome 29.0.1547.30 • google chrome 29.0.1547.31 • google chrome 29.0.1547.32 • google chrome 29.0.1547.33 • google chrome 29.0.1547.34 • google chrome 29.0.1547.35 • google chrome 29.0.1547.36 • google chrome 29.0.1547.37 • google chrome 29.0.1547.38 • google chrome 29.0.1547.39 • google chrome 29.0.1547.40 • google chrome 29.0.1547.41 • google chrome 29.0.1547.42 • google chrome 29.0.1547.45 • google chrome 29.0.1547.46 • google chrome 29.0.1547.47 • google chrome 29.0.1547.48 • google chrome 29.0.1547.49 • google chrome 29.0.1547.50 • google chrome 29.0.1547.51 • google chrome 29.0.1547.52 • google chrome 29.0.1547.53 • google chrome 29.0.1547.54 • google chrome 29.0.1547.55 • debian debian linux 7.0

Related

Weakness · not in database (1)

References