PT-2014-5136 · Opera+2 · Opera+2

Published 2014-10-08 · Updated 2024-06-15 · CVE-2014-3196

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 38.0.2125.101 Opera versions prior to 25.0.1614.50

Description The issue is related to the improper implementation of read-only restrictions on shared memory in the base/memory/shared memory win.cc component. This allows attackers to bypass a sandbox protection mechanism. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Google Chrome versions prior to 38.0.2125.101, update to version 38.0.2125.101 or later. For Opera versions prior to 25.0.1614.50, update to version 25.0.1614.50 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-2280

CVE-2014-3196

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

Opera

References · 2360

• https://errata.altlinux.org/ALT-PU-2014-2280 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3188 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3191 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3196 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3200 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3195 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7899 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3198 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3193 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3194 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3190 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3197 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3199 · Security Note