CVE-2014-7929

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91

Description A use-after-free issue in the HTMLScriptElement::didMoveToNewDocument function in the DOM implementation in Blink allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.

Recommendations For versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later to resolve the issue. As a temporary workaround, consider restricting the movement of SCRIPT elements across documents to minimize the risk of exploitation.