Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1725 State: PUBLISHED Published: 2014-04-09T10:00:00 Last Updated: 2024-08-06T09:50:11.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via a window.atob method call. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://securi
om/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://www.debian.org/security/2014/dsa-2905 - https://code.google.com/p/chromium/issues/detail?id=357332 - https://src.chromium.org/viewvc/blink?revision=170264&view=revision
CVE ID: CVE-2014-1726 State: PUBLISHED Published: 2014-04-09T10:00:00 Last Updated: 2024-08-06T09:50:11.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=346135 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - https://src.chromi
use.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - https://src.chromium.org/viewvc/chrome?revision=259353&view=revision - http://www.debian.org/security/2014/dsa-2905
CVE ID: CVE-2014-1727 State: PUBLISHED Published: 2014-04-09T10:00:00 Last Updated: 2024-08-06T09:50:11.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=342735 - https://src.chromium.org/viewvc/chrome?revision=255276&view=revision - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.
ision=255276&view=revision - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://www.debian.org/security/2014/dsa-2905
CVE ID: CVE-2014-1728 State: PUBLISHED Published: 2014-04-09T10:00:00 Last Updated: 2024-08-06T09:50:10.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=350533 - https://code.google.com/p/chromium/issues/detail?id=348319 - https://code.google.com/p/chromium/issues/detail?id=356517 - https://code.google.com/p/chromium/issues/detail?id=352982 - https://code.google.com/p/chromium/issues/detail?id=
6517 - https://code.google.com/p/chromium/issues/detail?id=352982 - https://code.google.com/p/chromium/issues/detail?id=350863 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - https://code.google.com/p/chromium/issues/detail?id=350537 - https://code.google.com/p/chromium/issues/detail?id=351815 - https://code.google.com/p/chromium/issues/detail?id=353013 - https://code.google.com/p/chromium/issues/detail?id=355586 - https://code.google.com/p/chromium/issues/detail?id=360298 - http://www.debian.org/security/2014/dsa-2905 - https://code.google.c
ode.google.com/p/chromium/issues/detail?id=360298 - http://www.debian.org/security/2014/dsa-2905 - https://code.google.com/p/chromium/issues/detail?id=356235 - https://code.google.com/p/chromium/issues/detail?id=358059 - https://code.google.com/p/chromium/issues/detail?id=354297 - https://code.google.com/p/chromium/issues/detail?id=345820 - https://code.google.com/p/chromium/issues/detail?id=347262
CVE ID: CVE-2014-1729 State: PUBLISHED Published: 2014-04-09T10:00:00 Last Updated: 2024-08-06T09:50:10.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/v8/source/detail?r=19923 - https://code.google.com/p/chromium/issues/detail?id=348319 - https://code.google.com/p/v8/source/detail?r=19584 - https://code.google.com/p/chromium/issues/detail?id=352982 - https://code.google.com/p/c
om/p/v8/source/detail?r=19584 - https://code.google.com/p/chromium/issues/detail?id=352982 - https://code.google.com/p/chromium/issues/detail?id=350863 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - https://code.google.com/p/chromium/issues/detail?id=355586 - http://www.debian.org/security/2014/dsa-2905 - https://code.google.com/p/v8/source/detail?r=20345 - https://code.google.com/p/chromium/issues/detail?id=358059 - https://code.google.com/p/chromium/issues/detail?id=345820 - https://code.google.com/p/v8/source/detail?r=19572 - https://code
//code.google.com/p/chromium/issues/detail?id=345820 - https://code.google.com/p/v8/source/detail?r=19572 - https://code.google.com/p/v8/source/detail?r=20409 - https://code.google.com/p/chromium/issues/detail?id=347262 - https://code.google.com/p/v8/source/detail?r=20033
CVE ID: CVE-2014-1730 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:11.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - https://code.goog
om/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - https://code.google.com/p/v8/source/detail?r=20388 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - https://code.google.com/p/v8/source/detail?r=20593 - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - https://code.google.com/p/v8/source/detail?r=20375 - https://code.google.com/p/v8/source/detail?r=20595 - https://code.google.com/p/chromium/issues/detail?id=354967 - https://code.google.com/p/v8/source/detail?r=20377
CVE ID: CVE-2014-1731 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:10.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot
Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - https://support.apple.com/kb/HT6537 - https://src.chromium.org/viewvc/blink?revision=171216&view=revision - http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://support.apple.com/kb/HT6254 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - http://archives.neohapsis.com/archives/bugtraq/2014
14-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html - https://code.google.com/p/chromium/issues/detail?id=349903 - http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html - http://www.securityfocus.com/bid/67572
CVE ID: CVE-2014-1732 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:10.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014
CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - https://code.google.com/p/chromium/issues/detail?id=352851 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - https://src.chromium.org/viewvc/chrome?revision=261737&view=revision
CVE ID: CVE-2014-1733 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:11.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - http://lists.opensuse.org/opensuse-updates/2014-05/
echromereleases.blogspot.com/2014/04/stable-channel-update_24.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - https://code.google.com/p/chromium/issues/detail?id=351103 - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - https://src.chromium.org/viewvc/chrome?revision=260157&view=revision
CVE ID: CVE-2014-1734 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:11.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - https://code.google.com/p/chromium/issues/detail?id=356181 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.ht
ps://code.google.com/p/chromium/issues/detail?id=356181 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - https://code.google.com/p/chromium/issues/detail?id=357382 - https://code.google.com/p/chromium/issues/detail?id=367314
CVE ID: CVE-2014-1735 State: PUBLISHED Published: 2014-04-26T10:00:00 Last Updated: 2024-08-06T09:50:11.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - https://code.google.com/p/v8/source/detail?r=20622 - https://code.google.com/p/v8/
14/04/stable-channel-update_24.html - https://code.google.com/p/v8/source/detail?r=20622 - https://code.google.com/p/v8/source/detail?r=20501 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html - https://code.google.com/p/chromium/issues/detail?id=359525 - https://src.chromium.org/viewvc/blink?revision=171077&view=revision - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html - http://www.debian.org/security/2014/dsa-2920 - https://src.chromium.org/viewvc/blink?revision=171127&view=revision - https://code.google.com/p/v8/source/detail?r=20624 - https://code.google.com/p/chro
link?revision=171127&view=revision - https://code.google.com/p/v8/source/detail?r=20624 - https://code.google.com/p/chromium/issues/detail?id=359130 - https://code.google.com/p/chromium/issues/detail?id=360429
CVE ID: CVE-2014-1736 State: PUBLISHED Published: 2014-05-06T10:00:00 Last Updated: 2024-08-06T09:50:10.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/v8/source/detail?r=20519 - http://secunia.com/advisories/58301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - http://www.debian.org/security/2
8301 - http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html - http://www.debian.org/security/2014/dsa-2920 - https://code.google.com/p/chromium/issues/detail?id=359802 - https://code.google.com/p/v8/source/detail?r=20525
CVE ID: CVE-2014-1737 State: PUBLISHED Published: 2014-05-11T21:00:00 Last Updated: 2024-08-06T09:50:11.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67300 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html - http://secunia.com/advisories/59262 - http://git.ker
sts.opensuse.org/opensuse-security-announce/2014-05/msg00012.html - http://secunia.com/advisories/59262 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c - http://secunia.com/advisories/59309 - http://secunia.com/advisories/59406 - http://www.debian.org/security/2014/dsa-2928 - https://bugzilla.redhat.com/show_bug.cgi?id=1094299 - http://linux.oracle.com/errata/ELSA-2014-0771.html - http://rhn.redhat.com/errata/RHSA-2014-0800.html - http://www.openwall.com/lists/oss-security/2014/05/09/2 - http://secunia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - http://lists.opensuse.org/opensuse-security-ann
ia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html - http://www.securitytracker.com/id/1030474 - http://linux.oracle.com/errata/ELSA-2014-3043.html - https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c - http://rhn.redhat.com/errata/RHSA-2014-0801.html
CVE ID: CVE-2014-1738 State: PUBLISHED Published: 2014-05-11T21:00:00 Last Updated: 2024-08-06T09:50:11.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html - http://www.securityfocus.com/bid/67302 - http://secunia.com/advisories/5
nsuse-security-announce/2014-05/msg00012.html - http://www.securityfocus.com/bid/67302 - http://secunia.com/advisories/59262 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2145e15e0557a01b9195d1c7199a1b92cb9be81f - http://secunia.com/advisories/59309 - http://secunia.com/advisories/59406 - http://www.debian.org/security/2014/dsa-2928 - https://bugzilla.redhat.com/show_bug.cgi?id=1094299 - http://linux.oracle.com/errata/ELSA-2014-0771.html - http://rhn.redhat.com/errata/RHSA-2014-0800.html - http://www.openwall.com/lists/oss-security/2014/05/09/2 - http://secunia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - http://lists.opensuse.org/
5/09/2 - http://secunia.com/advisories/59599 - http://www.debian.org/security/2014/dsa-2926 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html - https://github.com/torvalds/linux/commit/2145e15e0557a01b9195d1c7199a1b92cb9be81f - http://www.securitytracker.com/id/1030474 - http://linux.oracle.com/errata/ELSA-2014-3043.html - http://rhn.redhat.com/errata/RHSA-2014-0801.html
CVE ID: CVE-2014-1739 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T09:50:11.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2263-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1109774 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00
https://bugzilla.redhat.com/show_bug.cgi?id=1109774 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://www.openwall.com/lists/oss-security/2014/06/15/1 - https://source.android.com/security/bulletin/2017-04-01 - http://www.ubuntu.com/usn/USN-2261-1 - http://www.ubuntu.com/usn/USN-2264-1 - http://www.securityfocus.com/bid/68048 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6a623460e5fc960ac3ee9f946d3106233fd28d8 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6 - http://www.ubuntu.com/usn/USN-2259-1 - https://github.com/torvalds/linu
nel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6 - http://www.ubuntu.com/usn/USN-2259-1 - https://github.com/torvalds/linux/commit/e6a623460e5fc960ac3ee9f946d3106233fd28d8 - http://speirofr.appspot.com/cve-2014-1739-kernel-infoleak-vulnerability-in-media_enum_entities.html - http://secunia.com/advisories/59597 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2014-1740 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=358038 - http://www.debian.org/security/2014/dsa-2930 - http://www.securityfocus.com/bid/67374 - http://security.gentoo.org/glsa/
http://www.debian.org/security/2014/dsa-2930 - http://www.securityfocus.com/bid/67374 - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update.html - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://www.securitytracker.com/id/1030240 - https://src.chromium.org/viewvc/chrome?revision=261707&view=revision
CVE ID: CVE-2014-1741 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges. Additional Analyst Notes: - CVE Program Container: References: - https://src.chromium.org/viewvc/blink?revision=171165&view=revision - http://www.debian.org/security/2014/dsa-2930 - http://security.gentoo.org/glsa
wvc/blink?revision=171165&view=revision - http://www.debian.org/security/2014/dsa-2930 - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update.html - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://www.securityfocus.com/bid/67376 - http://www.securitytracker.com/id/1030240 - https://code.google.com/p/chromium/issues/detail?id=349898
CVE ID: CVE-2014-1742 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2930 - https://src.chromium.org/viewvc/blink?revision=171440&view=revision - http://security.gentoo.org/glsa/glsa-20
dsa-2930 - https://src.chromium.org/viewvc/blink?revision=171440&view=revision - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update.html - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://www.securityfocus.com/bid/67375 - http://www.securitytracker.com/id/1030240 - https://code.google.com/p/chromium/issues/detail?id=356690