NVD

Id
30289  
Name
CVE-2014-1714  
Description
The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer.cc in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows does not verify a certain format value, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the clipboard.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-16  
Modified Date
2017-01-06  
Seq
2014-1714  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160323 30289 CVE-2014-1714 20140326 VUPEN Security Research - Google Chrome "Clipboard::WriteData()" Function Sandbox Escape (Pwn2Own)  View
160324 30289 CVE-2014-1714 http://googlechromereleases.blogspot.com/2014/03/stable-channel-update_14.html  View
160325 30289 CVE-2014-1714 openSUSE-SU-2014:0501  View
160326 30289 CVE-2014-1714 GLSA-201408-16  View
160327 30289 CVE-2014-1714 https://code.google.com/p/chromium/issues/detail?id=352395  View
160328 30289 CVE-2014-1714 https://src.chromium.org/viewvc/chrome?revision=256974&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12822 JVNDB-2014-001697 複数の OS 上で稼働する Google Chrome の ui/base/clipboard/scoped_clipboard_writer.cc におけるサービス運用妨害 (DoS) の脆弱性 OS X、Linux、および Windows 上で稼働する Google Chrome の ui/base/clipboard/scoped_clipboard_writer.cc の ScopedClipboardWriter::WritePickledData 関数は、特定のフォーマット値を検証しないため、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-1714 69001 CVE-2014-1714 30289 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001697.html 2014-03-14 2014-03-18 View