CVE-2014-1736

2014-05-0600:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.1%

JSON

Integer overflow in api.cc in Google V8, as used in Google Chrome before
34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows
remote attackers to cause a denial of service or possibly have unspecified
other impact via a large length value.

Notes

Author	Note
chrisccoulson	Issue was fixed prior to Oxide r501, the first version to be included in an Ubuntu release

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.12.04.0~pkg897UNKNOWN
ubuntu14.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029UNKNOWN
ubuntu14.10noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN
ubuntu15.04noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN
ubuntu15.10noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN
ubuntu16.04noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN
ubuntu16.10noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN
ubuntu17.04noarchchromium-browser< 35.0.1916.153-0ubuntu1~pkg1029UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	chromium-browser	< 36.0.1985.125-0ubuntu1.12.04.0~pkg897	UNKNOWN
ubuntu	14.04	noarch	chromium-browser	< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029	UNKNOWN
ubuntu	14.10	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN
ubuntu	15.04	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN
ubuntu	15.10	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN
ubuntu	16.04	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN
ubuntu	16.10	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN
ubuntu	17.04	noarch	chromium-browser	< 35.0.1916.153-0ubuntu1~pkg1029	UNKNOWN