CVE-2013-6625: Use After Free
Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.
Affected Software
Event History
Frequently Asked Questions
What are the potential impacts of CVE-2013-6625?
CVE-2013-6625 can lead to denial of service or potentially give attackers the ability to exploit unspecified other impacts due to improper handling of DOM range objects.
How can I mitigate the risks associated with CVE-2013-6625?
To mitigate risks from CVE-2013-6625, it is recommended to update Google Chrome to version 31.0.1650.48 or later.
Which versions of Google Chrome are affected by CVE-2013-6625?
CVE-2013-6625 affects Google Chrome versions prior to 31.0.1650.48.
Is there a patch available for CVE-2013-6625?
Yes, Google has released a patch for CVE-2013-6625 in version 31.0.1650.48 of Chrome.
What does CVE-2013-6625 indicate about DOM handling in browsers?
CVE-2013-6625 highlights vulnerabilities in the way browsers like Google Chrome handle DOM range objects, which can lead to serious security issues.