PT-2015-4324 · Google+1 · Google Chrome+1

Published 2015-01-27 · Updated 2015-02-21 · CVE-2014-9648

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 on Android

Description The issue allows remote attackers to cause a denial of service, resulting in the loss of browser access to a site, via crafted JavaScript code. This can be demonstrated with specific web sites and their corresponding applications.

Recommendations For Google Chrome versions prior to 40.0.2214.91 on Android, update to version 40.0.2214.91 or later to resolve the issue.

Exploit

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2015-1098

CVE-2014-9648

Affected Products

Alt Linux

Google Chrome

References · 51

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-7928.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-7927.md · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7934 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7932 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9648 · Security Note
• https://bdu.fstec.ru/vul/2015-09975 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7924 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7943 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1346 · Security Note
• https://bdu.fstec.ru/vul/2016-01659 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1205 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7928 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7929 · Security Note
• http://security.gentoo.org/glsa/glsa-201502-13.xml · Vendor Advisory