PT-2014-3166 · Google+2 · Google Chrome+3

Publicado 2014-03-03 · Atualizado 2022-08-16 · CVE-2013-6668

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.146 Google V8 versions prior to 3.24.35.10

Description The issue is related to multiple unspecified vulnerabilities in Google V8, which is used in Google Chrome. These vulnerabilities can be exploited by attackers to cause a denial of service or possibly have other impact via unknown vectors.

Recommendations For Google Chrome versions prior to 33.0.1750.146, update to version 33.0.1750.146 or later to resolve the issue. For Google V8 versions prior to 3.24.35.10, update to version 3.24.35.10 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2014-1282

ALT-PU-2016-1086

CVE-2013-6668

DSA-2883-1

MGASA-2014-0121

MGASA-2014-0516

RHSA-2014:1744

SUSE-SU-2019:14246-1

SUSE-SU-2019_14246-1

Produtos afetados

Alt Linux

Google Chrome

Google V8

Suse

Referências · 557

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2014-1701 · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥❌ https://github.com/alidnf/CVE-2019-11730 · Exploit, Deleted
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/nodejs_pipelining.rb · Nota
• https://github.com/rapid7/metasploit-framework/pull/2548 · Nota
• https://github.com/joyent/node/commit/530af9cb8e700e7596b3ec812bad123c9fa06356 · Nota
• https://github.com/libexpat/libexpat/issues/317 · Nota
• https://github.com/Tripwire/OpenSSL-CCS-Inject-Test · Nota
• https://errata.altlinux.org/ALT-PU-2014-1282 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=12945 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=1548306 · Nota
• https://bugzilla.suse.com/1087459 · Nota