CVE-2014-1708

The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
https://code.google.com/p/chromium/issues/detail?id=344051

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:google:chrome_os::::::::
	cpe:2.3:o:google:chrome_os:33.0.1750.2:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.5:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.16:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.29:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.51:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.58:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.70:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.93:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.112:::::::*
	cpe:2.3:o:google:chrome_os:33.0.1750.124:::::::*

History

No history.

Information

Published : 2014-03-16 14:06

Updated : 2023-11-07 02:19

NVD link : CVE-2014-1708

Mitre link : CVE-2014-1708

CVE.ORG link : CVE-2014-1708

JSON object : View

Products Affected

google

chrome_os

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-1708", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-16T14:06:45.537", "references": [{"url": "http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=344051", "source": "chrome-cve-admin@google.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors."}, {"lang": "es", "value": "La implementaci\u00f3n boot en Google Chrome OS anterior a 33.0.1750.152 no considera debidamente persistencia de archivo, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados."}], "lastModified": "2023-11-07T02:19:06.590", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "439AB7FE-C97B-437D-8B63-5C578083F888", "versionEndIncluding": "33.0.1750.149"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80F12F19-8FA7-4A85-9ADE-59E9E9EE927B"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE878C97-75CD-47E7-A986-646158D180A8"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D8AFB09-4DE2-44ED-BBAA-9770FDE16FF2"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2C579B9-1410-471F-98BA-DC050DF8BFED"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "545E151A-1915-4E8F-823B-C7DA2EE5D9C1"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2036F2BE-4349-4034-8717-1F9EF208E482"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9FE324C-4A7D-4610-8106-9DCE8327058D"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65B2F712-3BD9-492E-AF21-66911756750C"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.112:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62E9D29C-CFF9-45C2-B063-5F29A368B43F"}, {"criteria": "cpe:2.3:o:google:chrome_os:33.0.1750.124:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA0C06F9-5739-4AF3-BEA3-AC404DE944BD"}], "operator": "OR"}]}], "sourceIdentifier": "chrome-cve-admin@google.com"}