Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-1746
HistoryMay 21, 2014 - 12:00 a.m.

CVE-2014-1746

2014-05-2100:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.4%

The InMemoryUrlProtocol::Read function in
media/filters/in_memory_url_protocol.cc in Google Chrome before
35.0.1916.114 relies on an insufficiently large integer data type, which
allows remote attackers to cause a denial of service (out-of-bounds read)
via vectors that trigger use of a large buffer.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.12.04.0~pkg897UNKNOWN
ubuntu14.04noarchchromium-browser< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029UNKNOWN
ubuntu14.04noarchoxide-qt< 1.0.4-0ubuntu0.14.04.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.4%