CVE-2014-1730

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://code.google.com/p/v8/source/detail?r=20595	Vendor Advisory
https://code.google.com/p/v8/source/detail?r=20377	Vendor Advisory
https://code.google.com/p/v8/source/detail?r=20388	Vendor Advisory
https://code.google.com/p/chromium/issues/detail?id=354967	Permissions Required
https://code.google.com/p/v8/source/detail?r=20593	Vendor Advisory
https://code.google.com/p/v8/source/detail?r=20375	Vendor Advisory
http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html	Broken Link Release Notes Vendor Advisory
http://secunia.com/advisories/58301	Broken Link Vendor Advisory
http://www.debian.org/security/2014/dsa-2920	Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html	Broken Link
http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html	Broken Link
http://security.gentoo.org/glsa/glsa-201408-16.xml	Third Party Advisory
http://secunia.com/advisories/60372	Broken Link

Advertisement

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows:-:::::::*
	cpe:2.3:o:apple:mac_os_x:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Information

Published : 2014-04-26 03:55

Updated : 2022-11-10 09:58

NVD link : CVE-2014-1730

Mitre link : CVE-2014-1730

JSON object : View

CWE

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Advertisement

Products Affected

apple

mac_os_x

linux

linux_kernel

google

chrome

microsoft

windows

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://code.google.com/p/v8/source/detail?r=20595", "name": "https://code.google.com/p/v8/source/detail?r=20595", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/v8/source/detail?r=20377", "name": "https://code.google.com/p/v8/source/detail?r=20377", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/v8/source/detail?r=20388", "name": "https://code.google.com/p/v8/source/detail?r=20388", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=354967", "name": "https://code.google.com/p/chromium/issues/detail?id=354967", "tags": ["Permissions Required"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/v8/source/detail?r=20593", "name": "https://code.google.com/p/v8/source/detail?r=20593", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://code.google.com/p/v8/source/detail?r=20375", "name": "https://code.google.com/p/v8/source/detail?r=20375", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html", "name": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html", "tags": ["Broken Link", "Release Notes", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/58301", "name": "58301", "tags": ["Broken Link", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2014/dsa-2920", "name": "DSA-2920", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html", "name": "openSUSE-SU-2014:0669", "tags": ["Broken Link"], "refsource": "SUSE"}, {"url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html", "name": "openSUSE-SU-2014:0668", "tags": ["Broken Link"], "refsource": "SUSE"}, {"url": "http://security.gentoo.org/glsa/glsa-201408-16.xml", "name": "GLSA-201408-16", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://secunia.com/advisories/60372", "name": "60372", "tags": ["Broken Link"], "refsource": "SECUNIA"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-843"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-1730", "ASSIGNER": "security@google.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-04-26T10:55Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "34.0.1847.131"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "34.0.1847.132"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-11-10T17:58Z"}