PT-2014-4307 · Google · Google Chrome

Published 2014-03-16 · Updated 2014-03-26 · CVE-2014-1708

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 33.0.1750.152

Description The issue is related to the boot implementation not properly considering file persistence, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 33.0.1750.152, update to version 33.0.1750.152 or later to resolve the issue.

Fix

Related Identifiers

CVE-2014-1708

Affected Products

Google Chrome

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1708 · Security Note
• https://code.google.com/p/chromium/issues/detail?id=344051 · Note
• http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html · Note