core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Nov 3, 2023 | Nov 3, 2023 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 7.0.4Upgrade to Apple Safari version 6.1.4 | Aug 28, 2015 | Jul 10, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/v8.Upgrade www-client/chromium. | Oct 30, 2017 | Jul 10, 2013 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 12, 2013 | Jul 9, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2015 |
| Ubuntu | — | Upgrade chromium-browser | Nov 19, 2024 | Jul 10, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub