[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Use-after-free vulnerability in Google Chrome or Apple Safari via FORM elements (Mac OS X)

ID: oval:org.secpod.oval:def:15822Date: (C)2013-10-25   (M)2023-11-18
Class: VULNERABILITYFamily: macos




The host is installed with Google Chrome before 30.0.1599.101 or Apple Safari before 6.1.4 or 7.x before 7.0.4 and is prone to use-after-free vulnerability. The flaws are present in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, which fails to handle vectors related to submission for FORM elements. Successful exploitation allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Platform:
Apple Mac OS 14
Apple Mac OS 13
Apple Mac OS 12
Apple Mac OS 11
Apple Mac OS X 10.15
Apple Mac OS X 10.14
Apple Mac OS X 10.12
Apple Mac OS X 10.13
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Apple Mac OS X Server 10.11
Product:
Google Chrome
Apple Safari
Reference:
CVE-2013-2927
CVE    1
CVE-2013-2927
CPE    75
cpe:/a:google:chrome:30.0.1599.60
cpe:/a:google:chrome:30.0.1599.61
cpe:/a:google:chrome:30.0.1599.20
cpe:/a:google:chrome:30.0.1599.64
...

© SecPod Technologies