PT-2014-1101 · Google+1 · Google Chrome+1
Publicado
2014-03-16
·
Atualizado
2024-06-15
·
CVE-2014-1714
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.152 on OS X and Linux
Google Chrome versions prior to 33.0.1750.154 on Windows
Description
The issue is related to the ScopedClipboardWriter::WritePickledData function not verifying a certain format value, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the clipboard. Additionally, there is a use-after-free error in the HTMLBodyElement::insertedInto function in Blink, which can be exploited by remote attackers to cause a denial of service or other impact on the system using attributes.
Recommendations
For Google Chrome versions prior to 33.0.1750.152 on OS X and Linux, update to version 33.0.1750.152 or later.
For Google Chrome versions prior to 33.0.1750.154 on Windows, update to version 33.0.1750.154 or later.
As a temporary workaround, consider restricting the use of the clipboard until a patch is available.
Exploit
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Suse