PT-2014-1342 · Google+4 · Google Chrome+4

Publicado 2014-08-26 · Atualizado 2024-06-15 · CVE-2014-3175

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94

Description The issue is related to multiple unspecified vulnerabilities that allow attackers to cause a denial of service or possibly have other impact via unknown vectors. This is related to the load truetype glyph function in truetype/ttgload.c in FreeType and other functions in other components.

Recommendations For versions prior to 37.0.2062.94, update to version 37.0.2062.94 or later to resolve the issue. As a temporary workaround, consider restricting the use of the load truetype glyph function in FreeType until a patch is available.

Exploit

Correção

Identificadores relacionados

ALT-PU-2014-2044

BDU:2015-00202

CVE-2014-3175

DSA-3039-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

USN-2326-1

Produtos afetados

Alt Linux

Freetype

Google Chrome

Suse

Ubuntu

Referências · 2420

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-3176.md · Exploit
• https://suse.com/security/cve/CVE-2015-1258 · Nota
• https://suse.com/security/cve/CVE-2018-6173 · Nota
• https://suse.com/security/cve/CVE-2019-5874 · Nota
• https://suse.com/security/cve/CVE-2020-6394 · Nota
• https://suse.com/security/cve/CVE-2021-21195 · Nota
• https://suse.com/security/cve/CVE-2011-3970 · Nota
• https://suse.com/security/cve/CVE-2020-6423 · Nota
• https://suse.com/security/cve/CVE-2022-0096 · Nota
• https://suse.com/security/cve/CVE-2017-5006 · Nota
• https://suse.com/security/cve/CVE-2017-15429 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2022-1634 · Nota
• https://suse.com/security/cve/CVE-2020-6460 · Nota
• https://suse.com/security/cve/CVE-2015-6774 · Nota