CVE-2014-3168

What it actually does

Use-after-free in Blink SVG animation caching allows remote memory corruption that can crash the process or permit arbitrary code execution.

Why it matters to the business

Outdated browser instances can be crashed or compromised simply by visiting a malicious web page, exposing user data and enabling further network access.

How an attack unfolds

An attacker hosts a web page containing crafted SVG content that triggers improper animation caching; when the browser frees the associated object and later reuses the dangling pointer during rendering, memory corruption occurs and is leveraged for code execution or denial of service.

How to fix it

Upgrade Google Chrome to version 37.0.2062.94 or later; apply the corresponding security updates for Debian and openSUSE packages.

How to confirm the fix worked

Confirm the installed Chrome version is 37.0.2062.94 or newer; test SVG animation rendering with known trigger patterns to verify absence of the crash condition.

Typical attack path

1. Serve malicious SVG animation via a crafted web page or advertisement
2. Victim browser loads and renders the SVG, triggering the use-after-free
3. Exploit memory corruption to achieve code execution or crash

How to detect it

Inspect web-proxy and browser telemetry logs for access to pages serving unusual SVG animations; correlate with process crash dumps that reference Blink SVG animation objects.

What your security team should do

• Force immediate update of all Chrome deployments to 37.0.2062.94 or later
• Block or sandbox access to untrusted web content until patching is complete
• Review browser crash telemetry for SVG-related faults as an interim signal