PT-2014-1051 · Google+3 · Google Chrome+3
Publicado
2014-04-24
·
Atualizado
2024-06-15
·
CVE-2014-1731
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 34.0.1847.131 on Windows and OS X
Google Chrome versions prior to 34.0.1847.132 on Linux
Description
The issue is related to the DOM implementation in Blink, where the
HTMLSelectElement.cpp does not properly check renderer state upon a focus event. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.Recommendations
For Google Chrome versions prior to 34.0.1847.131 on Windows and OS X, update to version 34.0.1847.131 or later.
For Google Chrome versions prior to 34.0.1847.132 on Linux, update to version 34.0.1847.132 or later.
As a temporary workaround, consider disabling the focus event handling for SELECT elements until a patch is available.
Exploit
Correção
DoS
RCE
Type Confusion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Ubuntu
Itunes