PT-2014-1044 · Google+1 · Google Chrome+1

Published 2014-04-08 · Updated 2024-06-15 · CVE-2014-1725

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116

Description The issue is related to the incorrect handling of string data consisting only of whitespace characters in the base64DecodeInternal function in wtf/text/Base64.cpp in Blink. This allows remote attackers to cause a denial of service (out-of-bounds read) via a call to the window.atob method.

Recommendations For versions prior to 34.0.1847.116, update to version 34.0.1847.116 or later to resolve the issue. As a temporary workaround, consider restricting the use of the window.atob method until a patch is applied.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2014-1582

BDU:2014-00126

CVE-2014-1725

DSA-2905-1

MGASA-2014-0183

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

References · 2389

• https://bdu.fstec.ru/vul/2014-00116 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1724 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1718 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1720 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1725 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1716 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1723 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1731 · Security Note
• https://bdu.fstec.ru/vul/2014-00142 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1732 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1721 · Security Note
• https://bdu.fstec.ru/vul/2014-00126 · Security Note