Google Chrome base64DecodeInternal()函数越界读漏洞

CVE ID:CVE-2014-1725 Google Chrome是一款流行的WEB浏览器。 Google Chrome base64DecodeInternal 函数text/Base64.cpp处理windows属性存在越界读当输入只有空格时window.atob方法没有返回正确值，允许攻击者利用漏洞构建恶意WEB页诱使用户解析，可使应用程序崩溃或读取内存消息。 0 Google Chrome 33.0.1750.154 Google Chrome 33.0.1750.152 Google Chrome 34.0.1847.116版本已修复该漏洞，建议用户下载使用：...

CVE-2014-1725

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...

Out-of-bounds

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...

CVE-2014-1725

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...

CVE-2014-1725

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...

CVE-2014-1725

The CVE-2014-1725 issue affects Blink’s base64DecodeInternal in wtf/text/Base64.cpp used by Google Chrome prior to 34.0.1847.116. The vulnerability arises from improper handling of whitespace-only input, enabling a remote attacker to trigger an out-of-bounds read via window.atob and cause a denia...

PT-2014-1044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description The issue is related to the incorrect handling of string data consisting only of whitespace characters in the base64DecodeInternal function in wtf/text/Base64.cpp in Blink. This allows...