deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3589
Published: 2014-08-25
Description: PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html; http://secunia.com/advisories/59825; http://www.debian.org/security/2014/dsa-3009
CVE: CVE-2014-5251
Published: 2014-08-25
Description: The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-1121.html; http://rhn.redhat.com/errata/RHSA-2014-1122.html; http://www.openwall.com/lists/oss-security/2014/08/15/6
CVE: CVE-2014-5252
Published: 2014-08-25
Description: The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-1121.html; http://rhn.redhat.com/errata/RHSA-2014-1122.html; http://www.openwall.com/lists/oss-security/2014/08/15/6
CVE: CVE-2014-5253
Published: 2014-08-25
Description: OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-1121.html; http://rhn.redhat.com/errata/RHSA-2014-1122.html; http://www.openwall.com/lists/oss-security/2014/08/15/6
CVE: CVE-2014-5356
Published: 2014-08-25
Description: OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause a denial of service (disk consumption) by uploading a large image.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-1337.html; http://rhn.redhat.com/errata/RHSA-2014-1338.html; http://rhn.redhat.com/errata/RHSA-2014-1685.html
CVE: CVE-2014-5335
Published: 2014-08-25
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attackers to hijack the authentication of administrators for requests that modify configurations or user accounts, as demonstrated by (1) changing the administrator password via a crafted request to CMD0/mod_cmd.xml or (2) adding a new SIP user via a crafted request to PBX0/ADMIN/mod_cmd_login.xml.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/archive/1/533197/100/0/threaded; http://www.securityfocus.com/archive/1/533197/100/0/threaded
CVE: CVE-2014-5453
Published: 2014-08-25
Description: Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain privileges via a Trojan horse file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/show/osvdb/108726; http://www.exploit-db.com/exploits/33961; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5191.php
CVE: CVE-2014-5454
Published: 2014-08-25
Description: Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://packetstormsecurity.com/files/127866/SAS-Visual-Analytics-6.4M1-Arbitrary-File-Upload.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/95351; http://packetstormsecurity.com/files/127866/SAS-Visual-Analytics-6.4M1-Arbitrary-File-Upload.html
CVE: CVE-2014-5455
Published: 2014-08-25
Description: Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-428
References: http://osvdb.org/show/osvdb/109007; http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html; http://www.exploit-db.com/exploits/34037
CVE: CVE-2014-5456
Published: 2014-08-25
Description: Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission to inject arbitrary web script or HTML via vectors related to the configuration.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/60759; http://www.securityfocus.com/bid/69346; https://www.drupal.org/node/2323983
CVE: CVE-2014-5457
Published: 2014-08-25
Description: QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2014/Jul/57; http://seclists.org/fulldisclosure/2014/Jul/58; http://seclists.org/fulldisclosure/2014/Jul/59
CVE: CVE-2014-5458
Published: 2014-08-25
Description: SQL injection vulnerability in sqrl_verify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2014/Aug/49; http://www.securityfocus.com/bid/69270; https://github.com/geir54/php-sqrl/blob/0fa574520a1843a33a84c3985f934e84af6f2042/sqrl_verify.php#L39-59
CVE: CVE-2013-6335
Published: 2014-08-26
Description: The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.
CVSS Score: 3.3 (LOW)
CWE: CWE-281
References: http://secunia.com/advisories/60482; http://www-01.ibm.com/support/docview.wss?uid=swg1IC96095; http://www-01.ibm.com/support/docview.wss?uid=swg21680453
CVE: CVE-2014-3033
Published: 2014-08-26
Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/60481; http://www-01.ibm.com/support/docview.wss?uid=swg21680665; https://exchange.xforce.ibmcloud.com/vulnerabilities/93192
CVE: CVE-2014-3040
Published: 2014-08-26
Description: Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2; Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4; and Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/60479; http://secunia.com/advisories/60480; http://secunia.com/advisories/60481
CVE: CVE-2014-3335
Published: 2014-08-26
Description: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/60222; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335; http://tools.cisco.com/security/center/viewAlert.x?alertId=35416
CVE: CVE-2014-4790
Published: 2014-08-26
Description: IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 and Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 do not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/60480; http://secunia.com/advisories/60481; http://www-01.ibm.com/support/docview.wss?uid=swg21680665
CVE: CVE-2014-0480
Published: 2014-08-26
Description: The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html; http://secunia.com/advisories/59782; http://secunia.com/advisories/61276
CVE: CVE-2014-0481
Published: 2014-08-26
Description: The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html; http://secunia.com/advisories/59782; http://secunia.com/advisories/61276
CVE: CVE-2014-0482
Published: 2014-08-26
Description: The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html; http://secunia.com/advisories/59782; http://secunia.com/advisories/61276
CVE: CVE-2014-0483
Published: 2014-08-26
Description: The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html; http://secunia.com/advisories/59782; http://secunia.com/advisories/61276
CVE: CVE-2014-2527
Published: 2014-08-26
Description: kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2014-08/msg00015.html; http://www.openwall.com/lists/oss-security/2014/03/17/2; http://www.openwall.com/lists/oss-security/2014/03/18/2
CVE: CVE-2014-2528
Published: 2014-08-26
Description: kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2014-08/msg00015.html; http://www.openwall.com/lists/oss-security/2014/03/17/2; http://www.openwall.com/lists/oss-security/2014/03/18/2
CVE: CVE-2014-3034
Published: 2014-08-26
Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/60479; http://www-01.ibm.com/support/docview.wss?uid=swg21680370; https://exchange.xforce.ibmcloud.com/vulnerabilities/93193
CVE: CVE-2014-3035
Published: 2014-08-26
Description: Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/60480; http://www-01.ibm.com/support/docview.wss?uid=swg21681277; https://exchange.xforce.ibmcloud.com/vulnerabilities/93194
CVE: CVE-2014-3041
Published: 2014-08-26
Description: SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/60479; http://www-01.ibm.com/support/docview.wss?uid=swg21680370; https://exchange.xforce.ibmcloud.com/vulnerabilities/93318
CVE: CVE-2014-3061
Published: 2014-08-26
Description: Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/60480; http://www-01.ibm.com/support/docview.wss?uid=swg21681277; https://exchange.xforce.ibmcloud.com/vulnerabilities/93537
CVE: CVE-2014-3524
Published: 2014-08-26
Description: Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
CVSS Score: 9.3 (HIGH)
CWE: CWE-77
References: http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/; http://secunia.com/advisories/59600; http://secunia.com/advisories/59877
CVE: CVE-2014-3907
Published: 2014-08-26
Description: Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN94409737/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000101; http://wordpress.org/plugins/wysija-newsletters/changelog/
CVE: CVE-2014-5035
Published: 2014-08-26
Description: The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML External Entity (XXE) issue.
CVSS Score: 6.8 (MEDIUM)
References: http://packetstormsecurity.com/files/127843/Opendaylight-1.0-Local-File-Inclusion-Remote-File-Inclusion.html; http://seclists.org/fulldisclosure/2014/Aug/34; http://www.securityfocus.com/archive/1/533114/100/0/threaded
CVE: CVE-2014-5263
Published: 2014-08-26
Description: vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the VMSTATE_END_OF_LIST macro, which allows attackers to cause a denial of service (out-of-bounds access, infinite loop, and memory corruption) and possibly gain privileges via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=3afca1d6d413592c2b78cf28f52fa24a586d8f56; http://www.openwall.com/lists/oss-security/2014/08/04/1; http://www.openwall.com/lists/oss-security/2014/08/16/1
CVE: CVE-2014-5307
Published: 2014-08-26
Description: Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/127948/Panda-Security-2014-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2014/Aug/53; http://www.securityfocus.com/archive/1/533182/100/0/threaded
CVE: CVE-2014-5336
Published: 2014-08-26
Description: Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote attackers to cause a denial of service (file descriptor consumption) via an HTTP request that triggers an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://monkey-project.com/Announcements/v1.5.3; http://seclists.org/oss-sec/2014/q3/397; http://seclists.org/oss-sec/2014/q3/412
CVE: CVE-2014-3575
Published: 2014-08-27
Description: The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2014-08/0115.html; http://blog.documentfoundation.org/2014/08/28/libreoffice-4-3-1-fresh-announced/; http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137657.html
CVE: CVE-2014-3596
Published: 2014-08-27
Description: The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.
CVSS Score: 5.8 (MEDIUM)
References: http://linux.oracle.com/errata/ELSA-2014-1193.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00022.html
CVE: CVE-2014-3168
Published: 2014-08-27
Description: Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3169
Published: 2014-08-27
Description: Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3170
Published: 2014-08-27
Description: extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3171
Published: 2014-08-27
Description: Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3172
Published: 2014-08-27
Description: The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3173
Published: 2014-08-27
Description: The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3174
Published: 2014-08-27
Description: modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3175
Published: 2014-08-27
Description: Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
CVSS Score: 10.0 (HIGH)
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268