CVE-2014-1703

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web…

published March 16, 2014

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01531 · 74.4th percentile
Published
2014-03-16T10:00Z
EPSS history
Timeline
  • 16 MAR 10:00Z
    Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web…
    cvelistv5