CVE-2014-1745

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents

Severity Score

7.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Vulnerabilidad de uso después de liberación en la implementación SVG en Blink, utilizado en Google Chrome anterior a 35.0.1916.114, permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores que provocan la eliminación de un objeto SVGFontFaceElement, relacionado con core/svg/SVGFontFaceElement.cpp.

A use-after-free vulnerability was found in the SVG implementation within WebKitGTK. This flaw allows remote attackers to exploit the removal of an SVGFontFaceElement object, which occurs through specific vectors that trigger the deletion of the object during rendering.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-01-29 CVE Reserved
2014-05-21 CVE Published
2024-02-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors
CWE-400: Uncontrolled Resource Consumption

CAPEC

References (12)

URL	Tag	Source
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
http://secunia.com/advisories/58920	Third Party Advisory
http://secunia.com/advisories/59155	Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/02/05/8	Mailing List
http://www.securitytracker.com/id/1030270	Vdb Entry
https://code.google.com/p/chromium/issues/detail?id=346192
https://src.chromium.org/viewvc/blink?revision=167993&view=revision

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html	2024-02-06
http://security.gentoo.org/glsa/glsa-201408-16.xml	2024-02-06
http://www.debian.org/security/2014/dsa-2939	2024-02-06
https://access.redhat.com/security/cve/CVE-2014-1745	2024-05-22
https://bugzilla.redhat.com/show_bug.cgi?id=2270151	2024-05-22

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				<= 35.0.1916.113 Search vendor "Google" for product "Chrome" and version " <= 35.0.1916.113"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.0 Search vendor "Google" for product "Chrome" and version "35.0.1916.0"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.1 Search vendor "Google" for product "Chrome" and version "35.0.1916.1"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.2 Search vendor "Google" for product "Chrome" and version "35.0.1916.2"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.3 Search vendor "Google" for product "Chrome" and version "35.0.1916.3"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.4 Search vendor "Google" for product "Chrome" and version "35.0.1916.4"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.5 Search vendor "Google" for product "Chrome" and version "35.0.1916.5"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.6 Search vendor "Google" for product "Chrome" and version "35.0.1916.6"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.7 Search vendor "Google" for product "Chrome" and version "35.0.1916.7"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.8 Search vendor "Google" for product "Chrome" and version "35.0.1916.8"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.9 Search vendor "Google" for product "Chrome" and version "35.0.1916.9"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.10 Search vendor "Google" for product "Chrome" and version "35.0.1916.10"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.11 Search vendor "Google" for product "Chrome" and version "35.0.1916.11"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.13 Search vendor "Google" for product "Chrome" and version "35.0.1916.13"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.14 Search vendor "Google" for product "Chrome" and version "35.0.1916.14"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.15 Search vendor "Google" for product "Chrome" and version "35.0.1916.15"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.17 Search vendor "Google" for product "Chrome" and version "35.0.1916.17"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.18 Search vendor "Google" for product "Chrome" and version "35.0.1916.18"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.19 Search vendor "Google" for product "Chrome" and version "35.0.1916.19"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.20 Search vendor "Google" for product "Chrome" and version "35.0.1916.20"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.21 Search vendor "Google" for product "Chrome" and version "35.0.1916.21"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.22 Search vendor "Google" for product "Chrome" and version "35.0.1916.22"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.23 Search vendor "Google" for product "Chrome" and version "35.0.1916.23"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.27 Search vendor "Google" for product "Chrome" and version "35.0.1916.27"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.31 Search vendor "Google" for product "Chrome" and version "35.0.1916.31"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.32 Search vendor "Google" for product "Chrome" and version "35.0.1916.32"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.33 Search vendor "Google" for product "Chrome" and version "35.0.1916.33"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.34 Search vendor "Google" for product "Chrome" and version "35.0.1916.34"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.35 Search vendor "Google" for product "Chrome" and version "35.0.1916.35"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.36 Search vendor "Google" for product "Chrome" and version "35.0.1916.36"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.37 Search vendor "Google" for product "Chrome" and version "35.0.1916.37"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.38 Search vendor "Google" for product "Chrome" and version "35.0.1916.38"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.39 Search vendor "Google" for product "Chrome" and version "35.0.1916.39"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.40 Search vendor "Google" for product "Chrome" and version "35.0.1916.40"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.41 Search vendor "Google" for product "Chrome" and version "35.0.1916.41"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.42 Search vendor "Google" for product "Chrome" and version "35.0.1916.42"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.43 Search vendor "Google" for product "Chrome" and version "35.0.1916.43"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.44 Search vendor "Google" for product "Chrome" and version "35.0.1916.44"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.45 Search vendor "Google" for product "Chrome" and version "35.0.1916.45"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.46 Search vendor "Google" for product "Chrome" and version "35.0.1916.46"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.47 Search vendor "Google" for product "Chrome" and version "35.0.1916.47"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.48 Search vendor "Google" for product "Chrome" and version "35.0.1916.48"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.49 Search vendor "Google" for product "Chrome" and version "35.0.1916.49"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.51 Search vendor "Google" for product "Chrome" and version "35.0.1916.51"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.52 Search vendor "Google" for product "Chrome" and version "35.0.1916.52"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.54 Search vendor "Google" for product "Chrome" and version "35.0.1916.54"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.56 Search vendor "Google" for product "Chrome" and version "35.0.1916.56"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.57 Search vendor "Google" for product "Chrome" and version "35.0.1916.57"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.59 Search vendor "Google" for product "Chrome" and version "35.0.1916.59"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.61 Search vendor "Google" for product "Chrome" and version "35.0.1916.61"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.68 Search vendor "Google" for product "Chrome" and version "35.0.1916.68"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.69 Search vendor "Google" for product "Chrome" and version "35.0.1916.69"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.71 Search vendor "Google" for product "Chrome" and version "35.0.1916.71"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.72 Search vendor "Google" for product "Chrome" and version "35.0.1916.72"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.74 Search vendor "Google" for product "Chrome" and version "35.0.1916.74"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.77 Search vendor "Google" for product "Chrome" and version "35.0.1916.77"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.80 Search vendor "Google" for product "Chrome" and version "35.0.1916.80"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.82 Search vendor "Google" for product "Chrome" and version "35.0.1916.82"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.84 Search vendor "Google" for product "Chrome" and version "35.0.1916.84"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.85 Search vendor "Google" for product "Chrome" and version "35.0.1916.85"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.86 Search vendor "Google" for product "Chrome" and version "35.0.1916.86"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.88 Search vendor "Google" for product "Chrome" and version "35.0.1916.88"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.90 Search vendor "Google" for product "Chrome" and version "35.0.1916.90"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.92 Search vendor "Google" for product "Chrome" and version "35.0.1916.92"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.93 Search vendor "Google" for product "Chrome" and version "35.0.1916.93"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.95 Search vendor "Google" for product "Chrome" and version "35.0.1916.95"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.96 Search vendor "Google" for product "Chrome" and version "35.0.1916.96"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.98 Search vendor "Google" for product "Chrome" and version "35.0.1916.98"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.99 Search vendor "Google" for product "Chrome" and version "35.0.1916.99"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.101 Search vendor "Google" for product "Chrome" and version "35.0.1916.101"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.103 Search vendor "Google" for product "Chrome" and version "35.0.1916.103"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.104 Search vendor "Google" for product "Chrome" and version "35.0.1916.104"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.105 Search vendor "Google" for product "Chrome" and version "35.0.1916.105"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.106 Search vendor "Google" for product "Chrome" and version "35.0.1916.106"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.107 Search vendor "Google" for product "Chrome" and version "35.0.1916.107"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.108 Search vendor "Google" for product "Chrome" and version "35.0.1916.108"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.109 Search vendor "Google" for product "Chrome" and version "35.0.1916.109"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.110 Search vendor "Google" for product "Chrome" and version "35.0.1916.110"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.111 Search vendor "Google" for product "Chrome" and version "35.0.1916.111"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.112 Search vendor "Google" for product "Chrome" and version "35.0.1916.112"		-		Affected