CVEvulnerability

CVE-2014-3173

5.0 MEDIUM Published 2014-08-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.

Affected configurations

• google chrome (<= 37.0.2062.93) • google chrome 37.0.2062.0 • google chrome 37.0.2062.1 • google chrome 37.0.2062.2 • google chrome 37.0.2062.3 • google chrome 37.0.2062.4 • google chrome 37.0.2062.5 • google chrome 37.0.2062.6 • google chrome 37.0.2062.7 • google chrome 37.0.2062.8 • google chrome 37.0.2062.9 • google chrome 37.0.2062.10 • google chrome 37.0.2062.11 • google chrome 37.0.2062.12 • google chrome 37.0.2062.13 • google chrome 37.0.2062.14 • google chrome 37.0.2062.15 • google chrome 37.0.2062.16 • google chrome 37.0.2062.17 • google chrome 37.0.2062.18 • google chrome 37.0.2062.19 • google chrome 37.0.2062.20 • google chrome 37.0.2062.21 • google chrome 37.0.2062.22 • google chrome 37.0.2062.23 • google chrome 37.0.2062.24 • google chrome 37.0.2062.25 • google chrome 37.0.2062.26 • google chrome 37.0.2062.27 • google chrome 37.0.2062.28 • google chrome 37.0.2062.29 • google chrome 37.0.2062.30 • google chrome 37.0.2062.31 • google chrome 37.0.2062.32 • google chrome 37.0.2062.33 • google chrome 37.0.2062.34 • google chrome 37.0.2062.35 • google chrome 37.0.2062.36 • google chrome 37.0.2062.37 • google chrome 37.0.2062.39 • google chrome 37.0.2062.43 • google chrome 37.0.2062.44 • google chrome 37.0.2062.45 • google chrome 37.0.2062.46 • google chrome 37.0.2062.47 • google chrome 37.0.2062.48 • google chrome 37.0.2062.49 • google chrome 37.0.2062.50 • google chrome 37.0.2062.51 • google chrome 37.0.2062.52 • google chrome 37.0.2062.53 • google chrome 37.0.2062.54 • google chrome 37.0.2062.55 • google chrome 37.0.2062.56 • google chrome 37.0.2062.57 • google chrome 37.0.2062.58 • google chrome 37.0.2062.59 • google chrome 37.0.2062.60 • google chrome 37.0.2062.61 • google chrome 37.0.2062.62 … and 22 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References