DEBIAN-CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

References

https://security-tracker.debian.org/tracker/CVE-2014-1745

Affected packages

Debian:12

webkit2gtk

Package

Name: webkit2gtk
Purl: pkg:deb/debian/webkit2gtk?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.42.1-1~deb12u1

Affected versions

2.*

2.40.1-1

2.40.2-1~deb11u1

2.40.2-1~deb12u1

2.40.2-1

2.40.3-1

2.40.3-2~deb11u1

2.40.3-2~deb11u2

2.40.3-2~deb12u1

2.40.3-2~deb12u2

2.40.3-2

2.40.4-1

2.40.5-1~deb11u1

2.40.5-1~deb12u1

2.40.5-1

2.41.4-1

2.41.5-1

2.41.6-1

2.41.90-1

2.41.91-1

2.41.91-2

2.41.92-1

2.42.0-1~bpo12+1

2.42.0-1

2.42.1-1~bpo12+1

2.42.1-1~deb11u1

2.42.1-1~deb11u2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"

wpewebkit

Package

Name: wpewebkit
Purl: pkg:deb/debian/wpewebkit?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.38.6-1

2.39.91-1

2.40.0-1

2.40.1-1

2.40.2-1

2.40.2-2

2.40.3-1

2.40.4-1

2.40.5-1

2.42.0-1

2.42.1-1

2.42.2-1

2.42.3-1

2.42.4-1

2.42.5-1

2.42.5-1.1~exp1

2.42.5-1.1

2.42.5-1.2

2.42.5-2~exp

2.44.1-1

2.44.2-1

2.44.2-2

2.44.3-1

2.44.4-1

2.46.1-1

2.46.2-1

2.46.3-1

2.46.4-1

2.46.5-1

2.46.6-1

2.48.0-1

2.48.1-1

2.48.1-2

2.48.2-1

2.48.3-1

2.48.5-1

2.48.6-1

2.48.6-2

2.50.0-1

2.50.0-2

2.50.1-1

2.50.2-1

2.50.3-1

2.50.4-1

2.50.5-1

2.50.6-1

2.52.0-1

2.52.1-1

2.52.2-1

2.52.2-2

2.52.3-1

2.52.4-1

2.52.5-1

2.52.6-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"

Debian:13

webkit2gtk

Package

Name: webkit2gtk
Purl: pkg:deb/debian/webkit2gtk?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.42.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"

wpewebkit

Package

Name: wpewebkit
Purl: pkg:deb/debian/wpewebkit?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.42.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"

Debian:14

webkit2gtk

Package

Name: webkit2gtk
Purl: pkg:deb/debian/webkit2gtk?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.42.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"

wpewebkit

Package

Name: wpewebkit
Purl: pkg:deb/debian/wpewebkit?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.42.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-1745.json"