{ "schema_version": "1.4.0", "id": "GHSA-whh9-38c9-2p39", "modified": "2022-05-17T04:48:10Z", "published": "2022-05-17T04:48:10Z", "aliases": [ "CVE-2013-6658" ], "details": "Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6658" }, { "type": "WEB", "url": "https://code.google.com/p/chromium/issues/detail?id=322891" }, { "type": "WEB", "url": "https://src.chromium.org/viewvc/blink?revision=165052&view=revision" }, { "type": "WEB", "url": "http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2014/dsa-2883" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-02-24T04:48:00Z" } }