Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-1730

Опубликовано: 26 апр. 2014
Источник: nvd
CVSS2: 7.8
EPSS Низкий

Описание

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 34.0.1847.131 (исключая)

Одно из

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 34.0.1847.132 (исключая)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 77%
0.01059
Низкий

7.8 High

CVSS2

Дефекты

CWE-843

Связанные уязвимости

ubuntu
больше 11 лет назад

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

redhat
больше 11 лет назад

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

debian
больше 11 лет назад

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows an ...

github
около 3 лет назад

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

fstec
больше 11 лет назад

Уязвимость браузера Google Chrome, позволяющая злоумышленнику обойти ограничения доступа

EPSS

Процентиль: 77%
0.01059
Низкий

7.8 High

CVSS2

Дефекты

CWE-843