PT-2014-1088 · Google+1 · Google Chrome+2

CVE-2014-1736

·

Publicado

2014-04-24

·

Atualizado

2022-11-10

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.131 on Windows and OS X Google Chrome versions prior to 34.0.1847.132 on Linux
Description The issue is related to an integer overflow in the api.cc file of Google V8, used in Google Chrome. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts by providing a large length value.
Recommendations For Google Chrome versions prior to 34.0.1847.131 on Windows and OS X, update to version 34.0.1847.131 or later. For Google Chrome versions prior to 34.0.1847.132 on Linux, update to version 34.0.1847.132 or later.

Exploit

Correção

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190CWE-399CWE-189

Identificadores relacionados

ALT-PU-2014-1575
BDU:2014-00170
BDU:2015-00101
CVE-2014-1736
DSA-2920-1
MGASA-2014-0213
ZDI-14-126

Produtos afetados

Alt Linux
Google Chrome
Google V8