The host is installed with Google Chrome before 28.0.1500.71 or Apple Safari before 6.1.4 or 7.x before 7.0.4 and is prone to multiple unspecified vulnerabilities. The flaws are present in the core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, which fails to handle certain unspecified vectors. Successful exploitation allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.