CVE-2013-6645

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/web_contents/web_contents_view_aura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving certain print-preview and tab-switch actions that interact with a speech input element.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=320183Issue Tracking, Mailing List, Vendor Advisory
http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.htmlRelease Notes, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlBroken Link, Mailing List, Third Party Advisory
http://www.debian.org/security/2014/dsa-2862Third Party Advisory
https://code.google.com/p/chromium/issues/detail?id=318791Exploit, Mailing List, Vendor Advisory
https://src.chromium.org/viewvc/chrome?revision=235302&view=revisionPatch, Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=320183Issue Tracking, Mailing List, Vendor Advisory
http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.htmlRelease Notes, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlBroken Link, Mailing List, Third Party Advisory
http://www.debian.org/security/2014/dsa-2862Third Party Advisory
https://code.google.com/p/chromium/issues/detail?id=318791Exploit, Mailing List, Vendor Advisory
https://src.chromium.org/viewvc/chrome?revision=235302&view=revisionPatch, Vendor Advisory

Timeline

Published: Jan 16, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-66467.5Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Ma CVE-2013-66479.8A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.CVE-2013-66487.5SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).CVE-2013-66497.5Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chro CVE-2013-66507.5The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.10 CVE-2013-66527.5Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attack CVE-2013-66537.5Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a den CVE-2013-66547.5The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750 CVE-2013-66557.5Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service o CVE-2013-66565.0The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117,CVE-2013-66576.4core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL duri CVE-2013-66587.5Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote a