Lucene search

[email protected]NVD:CVE-2014-1742

HistoryMay 14, 2014 - 11:13 a.m.

CVE-2014-1742

2014-05-1411:13:06

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.017

Percentile

87.7%

JSON

Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.

Affected configurations

Nvd

Node

googlechromeRange≤34.0.1847.136

googlechromeMatch34.0.1847.0

googlechromeMatch34.0.1847.1

googlechromeMatch34.0.1847.2

googlechromeMatch34.0.1847.3

googlechromeMatch34.0.1847.4

googlechromeMatch34.0.1847.5

googlechromeMatch34.0.1847.6

googlechromeMatch34.0.1847.7

googlechromeMatch34.0.1847.8

googlechromeMatch34.0.1847.9

googlechromeMatch34.0.1847.10

googlechromeMatch34.0.1847.12

googlechromeMatch34.0.1847.14

googlechromeMatch34.0.1847.15

googlechromeMatch34.0.1847.23

googlechromeMatch34.0.1847.24

googlechromeMatch34.0.1847.25

googlechromeMatch34.0.1847.36

googlechromeMatch34.0.1847.37

googlechromeMatch34.0.1847.38

googlechromeMatch34.0.1847.39

googlechromeMatch34.0.1847.41

googlechromeMatch34.0.1847.42

googlechromeMatch34.0.1847.43

googlechromeMatch34.0.1847.44

googlechromeMatch34.0.1847.45

googlechromeMatch34.0.1847.46

googlechromeMatch34.0.1847.47

googlechromeMatch34.0.1847.48

googlechromeMatch34.0.1847.49

googlechromeMatch34.0.1847.50

googlechromeMatch34.0.1847.51

googlechromeMatch34.0.1847.52

googlechromeMatch34.0.1847.53

googlechromeMatch34.0.1847.54

googlechromeMatch34.0.1847.55

googlechromeMatch34.0.1847.56

googlechromeMatch34.0.1847.57

googlechromeMatch34.0.1847.58

googlechromeMatch34.0.1847.59

googlechromeMatch34.0.1847.60

googlechromeMatch34.0.1847.61

googlechromeMatch34.0.1847.62

googlechromeMatch34.0.1847.63

googlechromeMatch34.0.1847.64

googlechromeMatch34.0.1847.65

googlechromeMatch34.0.1847.66

googlechromeMatch34.0.1847.67

googlechromeMatch34.0.1847.68

googlechromeMatch34.0.1847.69

googlechromeMatch34.0.1847.71

googlechromeMatch34.0.1847.72

googlechromeMatch34.0.1847.73

googlechromeMatch34.0.1847.74

googlechromeMatch34.0.1847.75

googlechromeMatch34.0.1847.76

googlechromeMatch34.0.1847.77

googlechromeMatch34.0.1847.78

googlechromeMatch34.0.1847.79

googlechromeMatch34.0.1847.80

googlechromeMatch34.0.1847.81

googlechromeMatch34.0.1847.82

googlechromeMatch34.0.1847.83

googlechromeMatch34.0.1847.85

googlechromeMatch34.0.1847.86

googlechromeMatch34.0.1847.87

googlechromeMatch34.0.1847.91

googlechromeMatch34.0.1847.92

googlechromeMatch34.0.1847.94

googlechromeMatch34.0.1847.97

googlechromeMatch34.0.1847.98

googlechromeMatch34.0.1847.99

googlechromeMatch34.0.1847.100

googlechromeMatch34.0.1847.101

googlechromeMatch34.0.1847.102

googlechromeMatch34.0.1847.103

googlechromeMatch34.0.1847.104

googlechromeMatch34.0.1847.109

googlechromeMatch34.0.1847.111

googlechromeMatch34.0.1847.112

googlechromeMatch34.0.1847.113

googlechromeMatch34.0.1847.114

googlechromeMatch34.0.1847.115

googlechromeMatch34.0.1847.116

googlechromeMatch34.0.1847.118

googlechromeMatch34.0.1847.120

googlechromeMatch34.0.1847.130

googlechromeMatch34.0.1847.131

googlechromeMatch34.0.1847.132

googlechromeMatch34.0.1847.133

googlechromeMatch34.0.1847.134

googlechromeMatch34.0.1847.135

References

googlechromereleases.blogspot.com/2014/05/stable-channel-update.html

lists.opensuse.org/opensuse-updates/2014-06/msg00023.html

secunia.com/advisories/59155

secunia.com/advisories/60372

security.gentoo.org/glsa/glsa-201408-16.xml

www.debian.org/security/2014/dsa-2930

www.securityfocus.com/bid/67375

www.securitytracker.com/id/1030240

code.google.com/p/chromium/issues/detail?id=356690

src.chromium.org/viewvc/blink?revision=171440&view=revision

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.017

Percentile

87.7%

JSON

Related for NVD:CVE-2014-1742

cvelist1 prion1 debiancve1 ubuntucve1 cve1 nessus8 osv1 openvas8 debian2 freebsd1 securityvulns2 mageia1 ubuntu1 gentoo1