CVE-2014-1703

Publication date 16 March 2014

Last updated 24 July 2024


Ubuntu priority

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

Status

Package Ubuntu Release Status
chromium-browser 13.10 saucy
Fixed 33.0.1750.152-0ubuntu0.13.10.1~pkg984.1
12.10 quantal
Fixed 33.0.1750.152-0ubuntu0.12.10.1~pkg895.1
12.04 LTS precise
Fixed 33.0.1750.152-0ubuntu0.12.04.1~pkg879.1
10.04 LTS lucid Ignored end of life
oxide-qt 13.10 saucy Not in release
12.10 quantal Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release