PT-2014-4304 · Google+2 · Google Chrome+2

Publicado 2014-03-14 · Atualizado 2025-09-29 · CVE-2014-1705

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.152 on OS X and Linux Google Chrome versions prior to 33.0.1750.154 on Windows

Description The issue allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact. It was demonstrated at Pwn2Own, indicating a real-world exploitation scenario.

Recommendations For Google Chrome versions prior to 33.0.1750.152 on OS X and Linux, update to version 33.0.1750.152 or later. For Google Chrome versions prior to 33.0.1750.154 on Windows, update to version 33.0.1750.154 or later.

Exploit

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2014-1315

ALT-PU-2014-1316

CVE-2014-1705

DSA-2883-1

MGASA-2014-0134

OPENSUSE-SU-2014_0501-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

ZDI-14-088

Produtos afetados

Alt Linux

Google Chrome

Suse

Referências · 2353

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-1705.md · Exploit
• 🔥 https://code.google.com/p/chromium/issues/detail?id=351787 · Exploit
• https://suse.com/security/cve/CVE-2015-1221 · Nota
• https://suse.com/security/cve/CVE-2016-5211 · Nota
• https://suse.com/security/cve/CVE-2015-1211 · Nota
• https://suse.com/security/cve/CVE-2021-30530 · Nota
• https://suse.com/security/cve/CVE-2011-3075 · Nota
• https://suse.com/security/cve/CVE-2011-3086 · Nota
• https://suse.com/security/cve/CVE-2020-15966 · Nota
• https://suse.com/security/cve/CVE-2015-1229 · Nota
• https://suse.com/security/cve/CVE-2019-5793 · Nota
• https://suse.com/security/cve/CVE-2011-3065 · Nota
• https://suse.com/security/cve/CVE-2016-1631 · Nota
• https://suse.com/security/cve/CVE-2020-15986 · Nota
• https://suse.com/security/cve/CVE-2020-6436 · Nota