PT-2014-1035 · Google+1 · Google Chrome+1

Published 2014-04-24 · Updated 2024-06-15 · CVE-2014-1730

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.131 on Windows and OS X Google Chrome versions prior to 34.0.1847.132 on Linux

Description The issue is related to incorrect storage of internationalization metadata, allowing remote attackers to bypass intended access restrictions. This is achieved by leveraging "type confusion" and reading property values, with the vulnerability being connected to i18n.js and runtime.cc.

Recommendations For Google Chrome versions prior to 34.0.1847.131 on Windows and OS X, update to version 34.0.1847.131 or later. For Google Chrome versions prior to 34.0.1847.132 on Linux, update to version 34.0.1847.132 or later.

Fix

Type Confusion

Weakness Enumeration

CWE-264

CWE-843

Related Identifiers

BDU:2014-00117

BDU:2015-00097

CVE-2014-1730

DSA-2920-1

MGASA-2014-0213

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

USN-2298-1

Affected Products

Google Chrome

Ubuntu

References · 2417

• https://ubuntu.com/security/CVE-2014-1730 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00117 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1740 · Security Note
• https://bdu.fstec.ru/vul/2014-00133 · Security Note
• https://ubuntu.com/security/CVE-2014-3160 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-1730 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2298-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00209 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1743 · Security Note
• https://bdu.fstec.ru/vul/2014-00157 · Security Note
• https://bdu.fstec.ru/vul/2014-00195 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1746 · Security Note
• https://bdu.fstec.ru/vul/2014-00151 · Security Note
• https://bdu.fstec.ru/vul/2014-00199 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3162 · Security Note