CVE-2014-1743

Publication date 21 May 2014

Last updated 24 July 2024

Ubuntu priority

Description

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	14.04 LTS trusty	Fixed 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
	13.10 saucy	Ignored end of life
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Fixed 36.0.1985.125-0ubuntu1.12.04.0~pkg897
	10.04 LTS lucid	Ignored end of life
oxide-qt	14.04 LTS trusty	Fixed 1.0.4-0ubuntu0.14.04.1
	13.10 saucy	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-2298-1
Oxide vulnerabilities
23 July 2014

Other references

https://src.chromium.org/viewvc/blink?revision=170702&view=revision
https://code.google.com/p/chromium/issues/detail?id=356653
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
https://www.cve.org/CVERecord?id=CVE-2014-1743