CVE-2013-2903

Priority
Medium
Description
Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument
function in core/html/HTMLMediaElement.cpp in Blink, as used in Google
Chrome before 29.0.1547.57, allows remote attackers to cause a denial of
service or possibly have unspecified other impact via vectors involving
moving a (1) AUDIO or (2) VIDEO element between documents.
References
Assigned-to
chad
Package
Upstream:released (29.0.1547.57)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):released (30.0.1599.114-0ubuntu0.12.04.3)
Ubuntu 12.10 (Quantal Quetzal):released (30.0.1599.114-0ubuntu0.12.10.2)
Ubuntu 13.04 (Raring Ringtail):released (30.0.1599.114-0ubuntu0.13.04.2)
Ubuntu 13.10 (Saucy Salamander):not-affected (29.0.1547.65-0ubuntu2)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (29.0.1547.65-0ubuntu2)
More Information

Valid XHTML 1.0 Strict

Updated: 2013-11-15 16:14:44 UTC (commit 7462)