Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Google Chrome 34.0.1847.136
Google Chrome 34.0.1847.135
Google Chrome 34.0.1847.134
Google Chrome 34.0.1847.133
Google Chrome 34.0.1847.132
Google Chrome 34.0.1847.131
Google Chrome 34.0.1847.130
Google Chrome 34.0.1847.120
Google Chrome 34.0.1847.118
Google Chrome 34.0.1847.116
Google Chrome 34.0.1847.115
Google Chrome 34.0.1847.114
Google Chrome 34.0.1847.113
Google Chrome 34.0.1847.112
Google Chrome 34.0.1847.111
Google Chrome 34.0.1847.109
Google Chrome 34.0.1847.104
Google Chrome 34.0.1847.103
Google Chrome 34.0.1847.102
Google Chrome 34.0.1847.101
Google Chrome 34.0.1847.100
Google Chrome 34.0.1847.99
Google Chrome 34.0.1847.98
Google Chrome 34.0.1847.97
Google Chrome 34.0.1847.94
Google Chrome 34.0.1847.92
Google Chrome 34.0.1847.91
Google Chrome 34.0.1847.87
Google Chrome 34.0.1847.86
Google Chrome 34.0.1847.85
Google Chrome 34.0.1847.83
Google Chrome 34.0.1847.82
Google Chrome 34.0.1847.81
Google Chrome 34.0.1847.80
Google Chrome 34.0.1847.79
Google Chrome 34.0.1847.78
Google Chrome 34.0.1847.77
Google Chrome 34.0.1847.76
Google Chrome 34.0.1847.75
Google Chrome 34.0.1847.74
Google Chrome 34.0.1847.73
Google Chrome 34.0.1847.72
Google Chrome 34.0.1847.71
Google Chrome 34.0.1847.69
Google Chrome 34.0.1847.68
Google Chrome 34.0.1847.67
Google Chrome 34.0.1847.66
Google Chrome 34.0.1847.65
Google Chrome 34.0.1847.64
Google Chrome 34.0.1847.63
Google Chrome 34.0.1847.62
Google Chrome 34.0.1847.61
Google Chrome 34.0.1847.60
Google Chrome 34.0.1847.59
Google Chrome 34.0.1847.58
Google Chrome 34.0.1847.57
Google Chrome 34.0.1847.56
Google Chrome 34.0.1847.55
Google Chrome 34.0.1847.54
Google Chrome 34.0.1847.53
Google Chrome 34.0.1847.52
Google Chrome 34.0.1847.51
Google Chrome 34.0.1847.50
Google Chrome 34.0.1847.49
Google Chrome 34.0.1847.48
Google Chrome 34.0.1847.47
Google Chrome 34.0.1847.46
Google Chrome 34.0.1847.45
Google Chrome 34.0.1847.44
Google Chrome 34.0.1847.43
Google Chrome 34.0.1847.42
Google Chrome 34.0.1847.41
Google Chrome 34.0.1847.39
Google Chrome 34.0.1847.38
Google Chrome 34.0.1847.37
Google Chrome 34.0.1847.36
Google Chrome 34.0.1847.25
Google Chrome 34.0.1847.24
Google Chrome 34.0.1847.23
Google Chrome 34.0.1847.15
Google Chrome 34.0.1847.14
Google Chrome 34.0.1847.12
Google Chrome 34.0.1847.10
Google Chrome 34.0.1847.9
Google Chrome 34.0.1847.8
Google Chrome 34.0.1847.7
Google Chrome 34.0.1847.6
Google Chrome 34.0.1847.5
Google Chrome 34.0.1847.4
Google Chrome 34.0.1847.3
Google Chrome 34.0.1847.2
Google Chrome 34.0.1847.1
Google Chrome 34.0.1847.0