PT-2014-8338 · Google+4 · Google Chrome+4

Publicado

2014-11-18

·

Atualizado

2024-06-15

·

CVE-2014-7907

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 39.0.2171.65
Description The issue is related to multiple use-after-free vulnerabilities in the ScreenOrientationController.cpp module. These vulnerabilities can be triggered by vectors that cause improper handling of a detached frame, specifically related to the lock and unlock methods. This can lead to a denial of service or possibly have other unspecified impacts.
Recommendations For Google Chrome versions prior to 39.0.2171.65, update to version 39.0.2171.65 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ScreenOrientationController module until a patch is available.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-2430
CVE-2014-7907
MGASA-2014-0485
OPENSUSE-SU-2014_1626-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2014:1894
RHSA-2014_1894
USN-2410-1

Produtos afetados

Alt Linux
Google Chrome
Red Hat
Suse
Ubuntu