Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-1710

Опубликовано: 16 мар. 2014
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
Версия до 33.0.1750.149 (включая)
cpe:2.3:o:google:chrome_os:33.0.1750.2:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.5:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.16:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.29:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.51:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.58:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.70:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.93:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.112:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:33.0.1750.124:*:*:*:*:*:*:*

EPSS

Процентиль: 72%
0.00712
Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.

EPSS

Процентиль: 72%
0.00712
Низкий

7.5 High

CVSS2

Дефекты

CWE-119