Candidate: CVE-2013-6664 PublicDate: 2014-03-05 05:11:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6664 https://src.chromium.org/viewvc/blink?revision=163825&view=revision https://code.google.com/p/chromium/issues/detail?id=326854 http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html Description: Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving FORM elements, as demonstrated by use of the speech-recognition feature. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: chad CVSS: Patches_chromium-browser: upstream_chromium-browser: released (33.0.1750.146) lucid_chromium-browser: ignored (reached end-of-life) precise_chromium-browser: released (33.0.1750.152-0ubuntu0.12.04.1~pkg879.1) quantal_chromium-browser: released (33.0.1750.152-0ubuntu0.12.10.1~pkg895.1) saucy_chromium-browser: released (33.0.1750.152-0ubuntu0.13.10.1~pkg984.1) devel_chromium-browser: released (33.0.1750.152-0ubuntu1~pkg995.1)