CVE-2014-1745

webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents

Published May 21, 2014 CVSS 3.1 · 7.1 High EPSS 1.7% KEV · Not listed
Description
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2939-1 chromium-browser security update
EUVD EUVD EUVD-2014-1819 Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00937}

epss

{'score': 0.00963}

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 4, 2025, 3:41 PM
Reserved
Jan 29, 2014, 12:00 AM
Status
Modified
Published
May 21, 2014, 11:14 AM
Modified
Jun 17, 2026, 12:05 AM
Severity
Moderate
Public date
Feb 5, 2024, 12:00 AM