Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:STC:CHROME:RANGE-BLUR-MC

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Google Chrome Selection In Mutation Event Handler Use After Free

Release Date

2013/11/18

Update Number

2320

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Google Chrome Selection In Mutation Event Handler Use After Free


This signature detects attempts to exploit a known vulnerability in the Google Chrome Web Browser. A successful attack can lead to a memory corruption and arbitrary remote code execution within the context of the user.

Extended Description

Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.

Affected Products

  • Google chrome 31.0.1650.0
  • Google chrome 31.0.1650.10
  • Google chrome 31.0.1650.11
  • Google chrome 31.0.1650.12
  • Google chrome 31.0.1650.13
  • Google chrome 31.0.1650.14
  • Google chrome 31.0.1650.15
  • Google chrome 31.0.1650.16
  • Google chrome 31.0.1650.17
  • Google chrome 31.0.1650.18
  • Google chrome 31.0.1650.19
  • Google chrome 31.0.1650.2
  • Google chrome 31.0.1650.20
  • Google chrome 31.0.1650.22
  • Google chrome 31.0.1650.23
  • Google chrome 31.0.1650.25
  • Google chrome 31.0.1650.26
  • Google chrome 31.0.1650.27
  • Google chrome 31.0.1650.28
  • Google chrome 31.0.1650.29
  • Google chrome 31.0.1650.3
  • Google chrome 31.0.1650.30
  • Google chrome 31.0.1650.31
  • Google chrome 31.0.1650.32
  • Google chrome 31.0.1650.33
  • Google chrome 31.0.1650.34
  • Google chrome 31.0.1650.35
  • Google chrome 31.0.1650.36
  • Google chrome 31.0.1650.37
  • Google chrome 31.0.1650.38
  • Google chrome 31.0.1650.39
  • Google chrome 31.0.1650.4
  • Google chrome 31.0.1650.41
  • Google chrome 31.0.1650.42
  • Google chrome 31.0.1650.43
  • Google chrome 31.0.1650.44
  • Google chrome 31.0.1650.45
  • Google chrome 31.0.1650.46
  • Google chrome 31.0.1650.47
  • Google chrome 31.0.1650.5
  • Google chrome 31.0.1650.6
  • Google chrome 31.0.1650.7
  • Google chrome 31.0.1650.8
  • Google chrome 31.0.1650.9

References

  • CVE: CVE-2013-6625

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out