CVE-2014-1746

Published May 21, 2014 CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Description
The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2939-1 chromium-browser security update
EUVD EUVD EUVD-2014-1820 The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.
Ubuntu USN Ubuntu USN USN-2298-1 Oxide vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 9:50 AM
Reserved
Jan 29, 2014, 12:00 AM
Status
Modified
Published
May 21, 2014, 11:14 AM
Modified
Jun 17, 2026, 12:05 AM