CVE-2014-1703

Severity CVSS v4.0:
Pending analysis
Type:
CWE-399 Resource Management Errors
Publication date:
16/03/2014
Last modified:
12/04/2025

Description

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* 33.0.1750.146 (including)
cpe:2.3:a:google:chrome:33.0.1750.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.4:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.5:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.6:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.7:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.8:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.9:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.10:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.11:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.12:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:33.0.1750.13:*:*:*:*:*:*:*