PT-2014-4304 · Google+2 · Google Chrome+2

Published 2014-03-14 · Updated 2025-09-29 · CVE-2014-1705

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.152 on OS X and Linux Google Chrome versions prior to 33.0.1750.154 on Windows

Description The issue allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact. It was demonstrated at Pwn2Own, indicating a real-world exploitation scenario.

Recommendations For Google Chrome versions prior to 33.0.1750.152 on OS X and Linux, update to version 33.0.1750.152 or later. For Google Chrome versions prior to 33.0.1750.154 on Windows, update to version 33.0.1750.154 or later.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2025_16880

ALT-PU-2014-1315

ALT-PU-2014-1316

CVE-2014-1705

DSA-2883-1

MGASA-2014-0134

OPENSUSE-SU-2014_0501-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

ZDI-14-088

Affected Products

Alt Linux

Google Chrome

Suse

References · 2353

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-1705.md · Exploit
• 🔥 https://code.google.com/p/chromium/issues/detail?id=351787 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-1705 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-088 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-1705 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0134 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-1705 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-1705 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201408-16.xml · Vendor Advisory
• http://debian.org/security/2014/dsa-2883 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0134.html · Security Note
• https://suse.com/security/cve/CVE-2015-1221 · Note