PT-2014-5136 · Opera+2 · Opera+2

Publicado 2014-10-08 · Atualizado 2024-06-15 · CVE-2014-3196

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 38.0.2125.101 Opera versions prior to 25.0.1614.50

Description The issue is related to the improper implementation of read-only restrictions on shared memory in the base/memory/shared memory win.cc component. This allows attackers to bypass a sandbox protection mechanism. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Google Chrome versions prior to 38.0.2125.101, update to version 38.0.2125.101 or later. For Opera versions prior to 25.0.1614.50, update to version 25.0.1614.50 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-2280

CVE-2014-3196

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux

Google Chrome

Opera

Referências · 2360

• https://suse.com/security/cve/CVE-2020-15974 · Nota
• https://suse.com/security/cve/CVE-2019-13742 · Nota
• https://suse.com/security/cve/CVE-2018-6106 · Nota
• https://src.chromium.org/viewvc/chrome?revision=288152&view=revision · Nota
• https://suse.com/security/cve/CVE-2019-5799 · Nota
• https://suse.com/security/cve/CVE-2022-1497 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2015-1293 · Nota
• https://suse.com/security/cve/CVE-2019-5801 · Nota
• https://suse.com/security/cve/CVE-2013-0899 · Nota
• https://suse.com/security/cve/CVE-2020-6397 · Nota
• https://suse.com/security/cve/CVE-2022-3449 · Nota
• https://suse.com/security/cve/CVE-2012-2815 · Nota
• https://suse.com/security/cve/CVE-2021-30564 · Nota
• https://suse.com/security/cve/CVE-2023-0927 · Nota