CVE-2014-1743: Use After Free

Published May 21, 2014
·
Updated

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.

Affected Software

81 affected components
Google Chrome<=35.0.1916.113
Google Chrome=35.0.1916.0
Google Chrome=35.0.1916.1
Google Chrome=35.0.1916.2
Google Chrome=35.0.1916.3
Google Chrome=35.0.1916.4
Google Chrome=35.0.1916.5
Google Chrome=35.0.1916.6
Google Chrome=35.0.1916.7
Google Chrome=35.0.1916.8
Google Chrome=35.0.1916.9
Google Chrome=35.0.1916.10
Google Chrome=35.0.1916.11
Google Chrome=35.0.1916.13
Google Chrome=35.0.1916.14
Google Chrome=35.0.1916.15
Google Chrome=35.0.1916.17
Google Chrome=35.0.1916.18
Google Chrome=35.0.1916.19
Google Chrome=35.0.1916.20
Google Chrome=35.0.1916.21
Google Chrome=35.0.1916.22
Google Chrome=35.0.1916.23
Google Chrome=35.0.1916.27
Google Chrome=35.0.1916.31
Google Chrome=35.0.1916.32
Google Chrome=35.0.1916.33
Google Chrome=35.0.1916.34
Google Chrome=35.0.1916.35
Google Chrome=35.0.1916.36
Google Chrome=35.0.1916.37
Google Chrome=35.0.1916.38
Google Chrome=35.0.1916.39
Google Chrome=35.0.1916.40
Google Chrome=35.0.1916.41
Google Chrome=35.0.1916.42
Google Chrome=35.0.1916.43
Google Chrome=35.0.1916.44
Google Chrome=35.0.1916.45
Google Chrome=35.0.1916.46
Google Chrome=35.0.1916.47
Google Chrome=35.0.1916.48
Google Chrome=35.0.1916.49
Google Chrome=35.0.1916.51
Google Chrome=35.0.1916.52
Google Chrome=35.0.1916.54
Google Chrome=35.0.1916.56
Google Chrome=35.0.1916.57
Google Chrome=35.0.1916.59
Google Chrome=35.0.1916.61
Google Chrome=35.0.1916.68
Google Chrome=35.0.1916.69
Google Chrome=35.0.1916.71
Google Chrome=35.0.1916.72
Google Chrome=35.0.1916.74
Google Chrome=35.0.1916.77
Google Chrome=35.0.1916.80
Google Chrome=35.0.1916.82
Google Chrome=35.0.1916.84
Google Chrome=35.0.1916.85
Google Chrome=35.0.1916.86
Google Chrome=35.0.1916.88
Google Chrome=35.0.1916.90
Google Chrome=35.0.1916.92
Google Chrome=35.0.1916.93
Google Chrome=35.0.1916.95
Google Chrome=35.0.1916.96
Google Chrome=35.0.1916.98
Google Chrome=35.0.1916.99
Google Chrome=35.0.1916.101
Google Chrome=35.0.1916.103
Google Chrome=35.0.1916.104
Google Chrome=35.0.1916.105
Google Chrome=35.0.1916.106
Google Chrome=35.0.1916.107
Google Chrome=35.0.1916.108
Google Chrome=35.0.1916.109
Google Chrome=35.0.1916.110
Google Chrome=35.0.1916.111
Google Chrome=35.0.1916.112
debian/chromium-browser

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Google Chrome to a version that resolves this vulnerability.

    Fixed in 35.0.1916.114

Event History

May 21, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:14 AM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2014-1743?

The severity of CVE-2014-1743 is categorized as high due to its potential to cause application crashes and denial of service.

2

How do I fix CVE-2014-1743?

To fix CVE-2014-1743, update your Google Chrome browser to the latest version beyond 35.0.1916.114.

3

What kind of attack can exploit CVE-2014-1743?

CVE-2014-1743 can be exploited by remote attackers using crafted JavaScript to trigger a use-after-free vulnerability.

4

Which versions of Google Chrome are affected by CVE-2014-1743?

CVE-2014-1743 affects Google Chrome versions prior to 35.0.1916.114.

5

What is the impact of CVE-2014-1743 on users?

The impact of CVE-2014-1743 includes application crashes and potential denial of service, affecting user experience and security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203