Out-of-bounds

2014-05-2111:14:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.1%

JSON

The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.

CPENameOperatorVersion
chromele35.0.1916.113
chromeeq35.0.1916.99
chromeeq35.0.1916.57
chromeeq35.0.1916.3
chromeeq35.0.1916.38
chromeeq35.0.1916.105
chromeeq35.0.1916.95
chromeeq35.0.1916.52
chromeeq35.0.1916.82
chromeeq35.0.1916.42

Name	Operator	Version
chrome	le	35.0.1916.113
chrome	eq	35.0.1916.99
chrome	eq	35.0.1916.57
chrome	eq	35.0.1916.3
chrome	eq	35.0.1916.38
chrome	eq	35.0.1916.105
chrome	eq	35.0.1916.95
chrome	eq	35.0.1916.52
chrome	eq	35.0.1916.82
chrome	eq	35.0.1916.42