CVE-2014-3168: Use After Free
Published Aug 27, 2014
·Updated
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.
Affected Software
85 affected components
Google Chrome<=37.0.2062.93
Google Chrome=37.0.2062.0
Google Chrome=37.0.2062.1
Google Chrome=37.0.2062.2
Google Chrome=37.0.2062.3
Google Chrome=37.0.2062.4
Google Chrome=37.0.2062.5
Google Chrome=37.0.2062.6
Google Chrome=37.0.2062.7
Google Chrome=37.0.2062.8
Google Chrome=37.0.2062.9
Google Chrome=37.0.2062.10
Google Chrome=37.0.2062.11
Google Chrome=37.0.2062.12
Google Chrome=37.0.2062.13
Google Chrome=37.0.2062.14
Google Chrome=37.0.2062.15
Google Chrome=37.0.2062.16
Google Chrome=37.0.2062.17
Google Chrome=37.0.2062.18
Google Chrome=37.0.2062.19
Google Chrome=37.0.2062.20
Google Chrome=37.0.2062.21
Google Chrome=37.0.2062.22
Google Chrome=37.0.2062.23
Google Chrome=37.0.2062.24
Google Chrome=37.0.2062.25
Google Chrome=37.0.2062.26
Google Chrome=37.0.2062.27
Google Chrome=37.0.2062.28
Google Chrome=37.0.2062.29
Google Chrome=37.0.2062.30
Google Chrome=37.0.2062.31
Google Chrome=37.0.2062.32
Google Chrome=37.0.2062.33
Google Chrome=37.0.2062.34
Google Chrome=37.0.2062.35
Google Chrome=37.0.2062.36
Google Chrome=37.0.2062.37
Google Chrome=37.0.2062.39
Google Chrome=37.0.2062.43
Google Chrome=37.0.2062.44
Google Chrome=37.0.2062.45
Google Chrome=37.0.2062.46
Google Chrome=37.0.2062.47
Google Chrome=37.0.2062.48
Google Chrome=37.0.2062.49
Google Chrome=37.0.2062.50
Google Chrome=37.0.2062.51
Google Chrome=37.0.2062.52
Google Chrome=37.0.2062.53
Google Chrome=37.0.2062.54
Google Chrome=37.0.2062.55
Google Chrome=37.0.2062.56
Google Chrome=37.0.2062.57
Google Chrome=37.0.2062.58
Google Chrome=37.0.2062.59
Google Chrome=37.0.2062.60
Google Chrome=37.0.2062.61
Google Chrome=37.0.2062.62
Google Chrome=37.0.2062.63
Google Chrome=37.0.2062.64
Google Chrome=37.0.2062.65
Google Chrome=37.0.2062.66
Google Chrome=37.0.2062.67
Google Chrome=37.0.2062.68
Google Chrome=37.0.2062.69
Google Chrome=37.0.2062.70
Google Chrome=37.0.2062.71
Google Chrome=37.0.2062.72
Google Chrome=37.0.2062.73
Google Chrome=37.0.2062.74
Google Chrome=37.0.2062.75
Google Chrome=37.0.2062.76
Google Chrome=37.0.2062.77
Google Chrome=37.0.2062.78
Google Chrome=37.0.2062.80
Google Chrome=37.0.2062.81
Google Chrome=37.0.2062.89
Google Chrome=37.0.2062.90
Google Chrome=37.0.2062.91
Google Chrome=37.0.2062.92
Debian Debian Linux=7.0
openSUSE openSUSE=12.3
openSUSE openSUSE=13.1
Remediation
Event History
Aug 27, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3168?
CVE-2014-3168 has a high severity rating, as it can lead to denial of service and potentially other unspecified impacts.
2
How do I fix CVE-2014-3168?
To fix CVE-2014-3168, update Google Chrome to version 37.0.2062.94 or later.
3
Which versions of Google Chrome are affected by CVE-2014-3168?
CVE-2014-3168 affects Google Chrome versions before 37.0.2062.94.
4
What type of vulnerability is CVE-2014-3168?
CVE-2014-3168 is a use-after-free vulnerability in the SVG implementation of Blink used in Google Chrome.
5
Can CVE-2014-3168 be exploited by remote attackers?
Yes, CVE-2014-3168 can be exploited by remote attackers via improper caching associated with animation.