PT-2014-1096 · Google+1 · Google Chrome+1

Published 2014-04-24 · Updated 2024-06-15 · CVE-2014-1732

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.131 on Windows and OS X Google Chrome versions prior to 34.0.1847.132 on Linux

Description The issue is related to a use-after-free error in the speech recognition bubble views component. This error can be triggered by an INPUT element that causes the speech recognition bubble window to be present for an incorrect duration, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts.

Recommendations For Google Chrome versions prior to 34.0.1847.131 on Windows and OS X, update to version 34.0.1847.131 or later. For Google Chrome versions prior to 34.0.1847.132 on Linux, update to version 34.0.1847.132 or later.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-399

CWE-416

Related Identifiers

ALT-PU-2014-1582

BDU:2014-00178

BDU:2015-00100

CVE-2014-1732

DSA-2920-1

MGASA-2014-0213

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

References · 2390

• 🔥 https://code.google.com/p/chromium/issues/detail?id=352851 · Exploit
• https://bdu.fstec.ru/vul/2014-00116 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1724 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1728 · Security Note
• https://debian.org/security/2014/dsa-2920 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1718 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1720 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1725 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-1732 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1716 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1723 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1731 · Security Note
• https://bdu.fstec.ru/vul/2014-00142 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1732 · Security Note