CVE-2014-1708

2014-03-1614:06:45

[email protected]

web.nvd.nist.gov

cve-2014-1708

google chrome os

remote code execution

file persistence

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.5%

JSON

The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

googlechrome_osRange≤33.0.1750.149

googlechrome_osMatch33.0.1750.2

googlechrome_osMatch33.0.1750.5

googlechrome_osMatch33.0.1750.16

googlechrome_osMatch33.0.1750.29

googlechrome_osMatch33.0.1750.51

googlechrome_osMatch33.0.1750.58

googlechrome_osMatch33.0.1750.70

googlechrome_osMatch33.0.1750.93

googlechrome_osMatch33.0.1750.112

googlechrome_osMatch33.0.1750.124

CPENameOperatorVersion
google:chrome_osgoogle chrome osle33.0.1750.149
google:chrome_osgoogle chrome oseq33.0.1750.2
google:chrome_osgoogle chrome oseq33.0.1750.5
google:chrome_osgoogle chrome oseq33.0.1750.16
google:chrome_osgoogle chrome oseq33.0.1750.29
google:chrome_osgoogle chrome oseq33.0.1750.51
google:chrome_osgoogle chrome oseq33.0.1750.58
google:chrome_osgoogle chrome oseq33.0.1750.70
google:chrome_osgoogle chrome oseq33.0.1750.93
google:chrome_osgoogle chrome oseq33.0.1750.112

CPE	Name	Operator	Version
google:chrome_os	google chrome os	le	33.0.1750.149
google:chrome_os	google chrome os	eq	33.0.1750.2
google:chrome_os	google chrome os	eq	33.0.1750.5
google:chrome_os	google chrome os	eq	33.0.1750.16
google:chrome_os	google chrome os	eq	33.0.1750.29
google:chrome_os	google chrome os	eq	33.0.1750.51
google:chrome_os	google chrome os	eq	33.0.1750.58
google:chrome_os	google chrome os	eq	33.0.1750.70
google:chrome_os	google chrome os	eq	33.0.1750.93
google:chrome_os	google chrome os	eq	33.0.1750.112