CVE-2014-1706

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
https://code.google.com/p/chromium/issues/detail?id=351796

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:google:chrome_os::::::::
	cpe:2.3:o:google:chrome_os:33.0.1750.2:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.5:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.16:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.29:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.51:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.58:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.70:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.93:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.112:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.124:::::::*

History

No history.

Information

Published : 2014-03-16 14:06

Updated : 2023-11-07 02:19

NVD link : CVE-2014-1706

Mitre link : CVE-2014-1706

CVE.ORG link : CVE-2014-1706

JSON object : View

Products Affected

google

chrome_os

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-1706", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-16T14:06:45.490", "references": [{"url": "http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=351796", "source": "chrome-cve-admin@google.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors."}, {"lang": "es", "value": "ca\u00edda en Google Chrome OS anterior a 33.0.1750.152 permite a atacantes inyectar comandos a trav\u00e9s de vectores no especificados."}], "lastModified": "2023-11-07T02:19:05.897", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "439AB7FE-C97B-437D-8B63-5C578083F888", "versionEndIncluding": "33.0.1750.149"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80F12F19-8FA7-4A85-9ADE-59E9E9EE927B"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE878C97-75CD-47E7-A986-646158D180A8"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D8AFB09-4DE2-44ED-BBAA-9770FDE16FF2"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2C579B9-1410-471F-98BA-DC050DF8BFED"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "545E151A-1915-4E8F-823B-C7DA2EE5D9C1"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2036F2BE-4349-4034-8717-1F9EF208E482"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9FE324C-4A7D-4610-8106-9DCE8327058D"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65B2F712-3BD9-492E-AF21-66911756750C"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.112:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62E9D29C-CFF9-45C2-B063-5F29A368B43F"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.124:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA0C06F9-5739-4AF3-BEA3-AC404DE944BD"}], "operator": "OR"}]}], "sourceIdentifier": "chrome-cve-admin@google.com"}