CVE-2014-1741 (CNNVD-201405-256)

HIGH
中文标题:
Google Chrome Blink 整数溢出漏洞
英文标题:
Multiple integer overflows in the replace-data functionality in the CharacterData interface implemen...
CVSS分数: 7.5
发布时间: 2014-05-14 10:00:00
漏洞类型: 数字错误
状态: PUBLISHED
数据质量分数: 0.30
数据版本: v3
漏洞描述
中文描述:

Google Chrome是美国谷歌(Google)公司开发的一款Web浏览器。Blink是美国谷歌(Google)公司和挪威欧朋(Opera Software)公司共同开发的一套浏览器排版引擎(渲染引擎)。 Google Chrome 34.0.1847.136及之前版本使用的Blink的core/dom/CharacterData.cpp文件的CharacterData interface实现过程中的replace-data功能存在整数溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或产生其他影响。

英文描述:

Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.

CWE类型:
CWE-189
标签:
(暂无数据)
受影响产品
厂商 产品 版本 版本范围 平台 CPE
google chrome * - - cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
google chrome 34.0.1847.0 - - cpe:2.3:a:google:chrome:34.0.1847.0:*:*:*:*:*:*:*
google chrome 34.0.1847.1 - - cpe:2.3:a:google:chrome:34.0.1847.1:*:*:*:*:*:*:*
google chrome 34.0.1847.2 - - cpe:2.3:a:google:chrome:34.0.1847.2:*:*:*:*:*:*:*
google chrome 34.0.1847.3 - - cpe:2.3:a:google:chrome:34.0.1847.3:*:*:*:*:*:*:*
google chrome 34.0.1847.4 - - cpe:2.3:a:google:chrome:34.0.1847.4:*:*:*:*:*:*:*
google chrome 34.0.1847.5 - - cpe:2.3:a:google:chrome:34.0.1847.5:*:*:*:*:*:*:*
google chrome 34.0.1847.6 - - cpe:2.3:a:google:chrome:34.0.1847.6:*:*:*:*:*:*:*
google chrome 34.0.1847.7 - - cpe:2.3:a:google:chrome:34.0.1847.7:*:*:*:*:*:*:*
google chrome 34.0.1847.8 - - cpe:2.3:a:google:chrome:34.0.1847.8:*:*:*:*:*:*:*
google chrome 34.0.1847.9 - - cpe:2.3:a:google:chrome:34.0.1847.9:*:*:*:*:*:*:*
google chrome 34.0.1847.10 - - cpe:2.3:a:google:chrome:34.0.1847.10:*:*:*:*:*:*:*
google chrome 34.0.1847.12 - - cpe:2.3:a:google:chrome:34.0.1847.12:*:*:*:*:*:*:*
google chrome 34.0.1847.14 - - cpe:2.3:a:google:chrome:34.0.1847.14:*:*:*:*:*:*:*
google chrome 34.0.1847.15 - - cpe:2.3:a:google:chrome:34.0.1847.15:*:*:*:*:*:*:*
google chrome 34.0.1847.23 - - cpe:2.3:a:google:chrome:34.0.1847.23:*:*:*:*:*:*:*
google chrome 34.0.1847.24 - - cpe:2.3:a:google:chrome:34.0.1847.24:*:*:*:*:*:*:*
google chrome 34.0.1847.25 - - cpe:2.3:a:google:chrome:34.0.1847.25:*:*:*:*:*:*:*
google chrome 34.0.1847.36 - - cpe:2.3:a:google:chrome:34.0.1847.36:*:*:*:*:*:*:*
google chrome 34.0.1847.37 - - cpe:2.3:a:google:chrome:34.0.1847.37:*:*:*:*:*:*:*
google chrome 34.0.1847.38 - - cpe:2.3:a:google:chrome:34.0.1847.38:*:*:*:*:*:*:*
google chrome 34.0.1847.39 - - cpe:2.3:a:google:chrome:34.0.1847.39:*:*:*:*:*:*:*
google chrome 34.0.1847.41 - - cpe:2.3:a:google:chrome:34.0.1847.41:*:*:*:*:*:*:*
google chrome 34.0.1847.42 - - cpe:2.3:a:google:chrome:34.0.1847.42:*:*:*:*:*:*:*
google chrome 34.0.1847.43 - - cpe:2.3:a:google:chrome:34.0.1847.43:*:*:*:*:*:*:*
google chrome 34.0.1847.44 - - cpe:2.3:a:google:chrome:34.0.1847.44:*:*:*:*:*:*:*
google chrome 34.0.1847.45 - - cpe:2.3:a:google:chrome:34.0.1847.45:*:*:*:*:*:*:*
google chrome 34.0.1847.46 - - cpe:2.3:a:google:chrome:34.0.1847.46:*:*:*:*:*:*:*
google chrome 34.0.1847.47 - - cpe:2.3:a:google:chrome:34.0.1847.47:*:*:*:*:*:*:*
google chrome 34.0.1847.48 - - cpe:2.3:a:google:chrome:34.0.1847.48:*:*:*:*:*:*:*
google chrome 34.0.1847.49 - - cpe:2.3:a:google:chrome:34.0.1847.49:*:*:*:*:*:*:*
google chrome 34.0.1847.50 - - cpe:2.3:a:google:chrome:34.0.1847.50:*:*:*:*:*:*:*
google chrome 34.0.1847.51 - - cpe:2.3:a:google:chrome:34.0.1847.51:*:*:*:*:*:*:*
google chrome 34.0.1847.52 - - cpe:2.3:a:google:chrome:34.0.1847.52:*:*:*:*:*:*:*
google chrome 34.0.1847.53 - - cpe:2.3:a:google:chrome:34.0.1847.53:*:*:*:*:*:*:*
google chrome 34.0.1847.54 - - cpe:2.3:a:google:chrome:34.0.1847.54:*:*:*:*:*:*:*
google chrome 34.0.1847.55 - - cpe:2.3:a:google:chrome:34.0.1847.55:*:*:*:*:*:*:*
google chrome 34.0.1847.56 - - cpe:2.3:a:google:chrome:34.0.1847.56:*:*:*:*:*:*:*
google chrome 34.0.1847.57 - - cpe:2.3:a:google:chrome:34.0.1847.57:*:*:*:*:*:*:*
google chrome 34.0.1847.58 - - cpe:2.3:a:google:chrome:34.0.1847.58:*:*:*:*:*:*:*
google chrome 34.0.1847.59 - - cpe:2.3:a:google:chrome:34.0.1847.59:*:*:*:*:*:*:*
google chrome 34.0.1847.60 - - cpe:2.3:a:google:chrome:34.0.1847.60:*:*:*:*:*:*:*
google chrome 34.0.1847.61 - - cpe:2.3:a:google:chrome:34.0.1847.61:*:*:*:*:*:*:*
google chrome 34.0.1847.62 - - cpe:2.3:a:google:chrome:34.0.1847.62:*:*:*:*:*:*:*
google chrome 34.0.1847.63 - - cpe:2.3:a:google:chrome:34.0.1847.63:*:*:*:*:*:*:*
google chrome 34.0.1847.64 - - cpe:2.3:a:google:chrome:34.0.1847.64:*:*:*:*:*:*:*
google chrome 34.0.1847.65 - - cpe:2.3:a:google:chrome:34.0.1847.65:*:*:*:*:*:*:*
google chrome 34.0.1847.66 - - cpe:2.3:a:google:chrome:34.0.1847.66:*:*:*:*:*:*:*
google chrome 34.0.1847.67 - - cpe:2.3:a:google:chrome:34.0.1847.67:*:*:*:*:*:*:*
google chrome 34.0.1847.68 - - cpe:2.3:a:google:chrome:34.0.1847.68:*:*:*:*:*:*:*
google chrome 34.0.1847.69 - - cpe:2.3:a:google:chrome:34.0.1847.69:*:*:*:*:*:*:*
google chrome 34.0.1847.71 - - cpe:2.3:a:google:chrome:34.0.1847.71:*:*:*:*:*:*:*
google chrome 34.0.1847.72 - - cpe:2.3:a:google:chrome:34.0.1847.72:*:*:*:*:*:*:*
google chrome 34.0.1847.73 - - cpe:2.3:a:google:chrome:34.0.1847.73:*:*:*:*:*:*:*
google chrome 34.0.1847.74 - - cpe:2.3:a:google:chrome:34.0.1847.74:*:*:*:*:*:*:*
google chrome 34.0.1847.75 - - cpe:2.3:a:google:chrome:34.0.1847.75:*:*:*:*:*:*:*
google chrome 34.0.1847.76 - - cpe:2.3:a:google:chrome:34.0.1847.76:*:*:*:*:*:*:*
google chrome 34.0.1847.77 - - cpe:2.3:a:google:chrome:34.0.1847.77:*:*:*:*:*:*:*
google chrome 34.0.1847.78 - - cpe:2.3:a:google:chrome:34.0.1847.78:*:*:*:*:*:*:*
google chrome 34.0.1847.79 - - cpe:2.3:a:google:chrome:34.0.1847.79:*:*:*:*:*:*:*
google chrome 34.0.1847.80 - - cpe:2.3:a:google:chrome:34.0.1847.80:*:*:*:*:*:*:*
google chrome 34.0.1847.81 - - cpe:2.3:a:google:chrome:34.0.1847.81:*:*:*:*:*:*:*
google chrome 34.0.1847.82 - - cpe:2.3:a:google:chrome:34.0.1847.82:*:*:*:*:*:*:*
google chrome 34.0.1847.83 - - cpe:2.3:a:google:chrome:34.0.1847.83:*:*:*:*:*:*:*
google chrome 34.0.1847.85 - - cpe:2.3:a:google:chrome:34.0.1847.85:*:*:*:*:*:*:*
google chrome 34.0.1847.86 - - cpe:2.3:a:google:chrome:34.0.1847.86:*:*:*:*:*:*:*
google chrome 34.0.1847.87 - - cpe:2.3:a:google:chrome:34.0.1847.87:*:*:*:*:*:*:*
google chrome 34.0.1847.91 - - cpe:2.3:a:google:chrome:34.0.1847.91:*:*:*:*:*:*:*
google chrome 34.0.1847.92 - - cpe:2.3:a:google:chrome:34.0.1847.92:*:*:*:*:*:*:*
google chrome 34.0.1847.94 - - cpe:2.3:a:google:chrome:34.0.1847.94:*:*:*:*:*:*:*
google chrome 34.0.1847.97 - - cpe:2.3:a:google:chrome:34.0.1847.97:*:*:*:*:*:*:*
google chrome 34.0.1847.98 - - cpe:2.3:a:google:chrome:34.0.1847.98:*:*:*:*:*:*:*
google chrome 34.0.1847.99 - - cpe:2.3:a:google:chrome:34.0.1847.99:*:*:*:*:*:*:*
google chrome 34.0.1847.100 - - cpe:2.3:a:google:chrome:34.0.1847.100:*:*:*:*:*:*:*
google chrome 34.0.1847.101 - - cpe:2.3:a:google:chrome:34.0.1847.101:*:*:*:*:*:*:*
google chrome 34.0.1847.102 - - cpe:2.3:a:google:chrome:34.0.1847.102:*:*:*:*:*:*:*
google chrome 34.0.1847.103 - - cpe:2.3:a:google:chrome:34.0.1847.103:*:*:*:*:*:*:*
google chrome 34.0.1847.104 - - cpe:2.3:a:google:chrome:34.0.1847.104:*:*:*:*:*:*:*
google chrome 34.0.1847.109 - - cpe:2.3:a:google:chrome:34.0.1847.109:*:*:*:*:*:*:*
google chrome 34.0.1847.111 - - cpe:2.3:a:google:chrome:34.0.1847.111:*:*:*:*:*:*:*
google chrome 34.0.1847.112 - - cpe:2.3:a:google:chrome:34.0.1847.112:*:*:*:*:*:*:*
google chrome 34.0.1847.113 - - cpe:2.3:a:google:chrome:34.0.1847.113:*:*:*:*:*:*:*
google chrome 34.0.1847.114 - - cpe:2.3:a:google:chrome:34.0.1847.114:*:*:*:*:*:*:*
google chrome 34.0.1847.115 - - cpe:2.3:a:google:chrome:34.0.1847.115:*:*:*:*:*:*:*
google chrome 34.0.1847.116 - - cpe:2.3:a:google:chrome:34.0.1847.116:*:*:*:*:*:*:*
google chrome 34.0.1847.118 - - cpe:2.3:a:google:chrome:34.0.1847.118:*:*:*:*:*:*:*
google chrome 34.0.1847.120 - - cpe:2.3:a:google:chrome:34.0.1847.120:*:*:*:*:*:*:*
google chrome 34.0.1847.130 - - cpe:2.3:a:google:chrome:34.0.1847.130:*:*:*:*:*:*:*
google chrome 34.0.1847.131 - - cpe:2.3:a:google:chrome:34.0.1847.131:*:*:*:*:*:*:*
google chrome 34.0.1847.132 - - cpe:2.3:a:google:chrome:34.0.1847.132:*:*:*:*:*:*:*
google chrome 34.0.1847.133 - - cpe:2.3:a:google:chrome:34.0.1847.133:*:*:*:*:*:*:*
google chrome 34.0.1847.134 - - cpe:2.3:a:google:chrome:34.0.1847.134:*:*:*:*:*:*:*
google chrome 34.0.1847.135 - - cpe:2.3:a:google:chrome:34.0.1847.135:*:*:*:*:*:*:*
解决方案
中文解决方案:
(暂无数据)
英文解决方案:
(暂无数据)
临时解决方案:
(暂无数据)
参考链接
无标题 x_refsource_CONFIRM
cve.org
访问
DSA-2930 vendor-advisory
cve.org
访问
GLSA-201408-16 vendor-advisory
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
60372 third-party-advisory
cve.org
访问
openSUSE-SU-2014:0783 vendor-advisory
cve.org
访问
59155 third-party-advisory
cve.org
访问
67376 vdb-entry
cve.org
访问
1030240 vdb-entry
cve.org
访问
无标题 x_refsource_CONFIRM
cve.org
访问
CVSS评分详情
7.5
HIGH
CVSS向量: AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS版本: 2.0
机密性
PARTIAL
完整性
PARTIAL
可用性
PARTIAL
时间信息
发布时间:
2014-05-14 10:00:00
修改时间:
2024-08-06 09:50:11
创建时间:
2025-11-11 15:33:44
更新时间:
2025-11-11 15:51:23
利用信息
暂无可利用代码信息
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2014-1741 2025-11-11 15:18:43 2025-11-11 07:33:44
NVD nvd_CVE-2014-1741 2025-11-11 14:54:32 2025-11-11 07:42:30
CNNVD cnnvd_CNNVD-201405-256 2025-11-11 15:09:27 2025-11-11 07:51:23
版本与语言
当前版本: v3
主要语言: EN
支持语言:
EN ZH
安全公告
暂无安全公告信息
变更历史
v3 CNNVD
2025-11-11 15:51:23
vulnerability_type: 未提取 → 数字错误; cnnvd_id: 未提取 → CNNVD-201405-256; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
  • vulnerability_type: 未提取 -> 数字错误
  • cnnvd_id: 未提取 -> CNNVD-201405-256
  • data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2 NVD
2025-11-11 15:42:30
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.5; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:P/I:P/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 93; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
  • cvss_score: 未提取 -> 7.5
  • cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:P/I:P/A:P
  • cvss_version: NOT_EXTRACTED -> 2.0
  • affected_products_count: 0 -> 93
  • data_sources: ['cve'] -> ['cve', 'nvd']