CVEvulnerability
CVE-2014-3152
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-05-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.
Affected configurations
• fedoraproject fedora 20
• fedoraproject fedora 21
• fedoraproject fedora 22
• google v8 (<= 3.25.28)
• google v8 3.25.0
• google v8 3.25.1
• google v8 3.25.2
• google v8 3.25.3
• google v8 3.25.4
• google v8 3.25.5
• google v8 3.25.6
• google v8 3.25.7
• google v8 3.25.8
• google v8 3.25.9
• google v8 3.25.10
• google v8 3.25.11
• google v8 3.25.12
• google v8 3.25.13
• google v8 3.25.14
• google v8 3.25.15
• google v8 3.25.16
• google v8 3.25.17
• google v8 3.25.18
• google v8 3.25.19
• google v8 3.25.20
• google v8 3.25.21
• google v8 3.25.22
• google v8 3.25.23
• google v8 3.25.24
• google v8 3.25.25
• google v8 3.25.26
• google v8 3.25.27
• google chrome (<= 35.0.1916.113)
• google chrome 35.0.1916.0
• google chrome 35.0.1916.1
• google chrome 35.0.1916.2
• google chrome 35.0.1916.3
• google chrome 35.0.1916.4
• google chrome 35.0.1916.5
• google chrome 35.0.1916.6
• google chrome 35.0.1916.7
• google chrome 35.0.1916.8
• google chrome 35.0.1916.9
• google chrome 35.0.1916.10
• google chrome 35.0.1916.11
• google chrome 35.0.1916.13
• google chrome 35.0.1916.14
• google chrome 35.0.1916.15
• google chrome 35.0.1916.17
• google chrome 35.0.1916.18
• google chrome 35.0.1916.19
• google chrome 35.0.1916.20
• google chrome 35.0.1916.21
• google chrome 35.0.1916.22
• google chrome 35.0.1916.23
• google chrome 35.0.1916.27
• google chrome 35.0.1916.31
• google chrome 35.0.1916.32
• google chrome 35.0.1916.33
• google chrome 35.0.1916.34
… and 52 more
Related
Weakness · not in database (1)
References
- http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html googlechromereleases.blogspot.com
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157338.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157357.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157363.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html lists.opensuse.org
- http://secunia.com/advisories/58920 secunia.com
- http://secunia.com/advisories/59155 secunia.com
- http://secunia.com/advisories/60372 secunia.com
- http://www.debian.org/security/2014/dsa-2939 www.debian.org
- http://www.securitytracker.com/id/1030270 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=358057 code.google.com
- https://code.google.com/p/v8/source/detail?r=20363 code.google.com
- http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html googlechromereleases.blogspot.com
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157338.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157357.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157363.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html lists.opensuse.org
- http://secunia.com/advisories/58920 secunia.com
- http://secunia.com/advisories/59155 secunia.com
- http://secunia.com/advisories/60372 secunia.com
- http://www.debian.org/security/2014/dsa-2939 www.debian.org
- http://www.securitytracker.com/id/1030270 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=358057 code.google.com
- https://code.google.com/p/v8/source/detail?r=20363 code.google.com