PT-2014-1380 · Google+3 · Google Chrome+3

Publicado

2014-08-26

·

Atualizado

2024-06-15

·

CVE-2014-3173

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94
Description The issue is related to the WebGL implementation in Google Chrome, where clear calls do not interact properly with the state of a draw buffer. This allows remote attackers to cause a denial of service by reading uninitialized memory via a crafted CANVAS element. The issue is related to the files gpu/command buffer/service/framebuffer manager.cc and gpu/command buffer/service/gles2 cmd decoder.cc.
Recommendations For Google Chrome versions prior to 37.0.2062.94, update to version 37.0.2062.94 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-2044
BDU:2015-00242
CVE-2014-3173
DSA-3039-1
OPENSUSE-SU-2014_1151-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
USN-2326-1

Produtos afetados

Alt Linux
Google Chrome
Suse
Ubuntu