CVE-2014-1732

2014-04-2600:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.7%

JSON

Use-after-free vulnerability in
browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before
34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows
remote attackers to cause a denial of service or possibly have unspecified
other impact via an INPUT element that triggers the presence of a Speech
Recognition Bubble window for an incorrect duration.

Notes

Author	Note
chrisccoulson	Bug is outside of the content layer

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.12.04.0~pkg897UNKNOWN
ubuntu14.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	chromium-browser	< 36.0.1985.125-0ubuntu1.12.04.0~pkg897	UNKNOWN
ubuntu	14.04	noarch	chromium-browser	< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029	UNKNOWN