CVE-2014-1733 in Chrome
Summary
The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/29/2014
Disclosure
04/26/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13082 | Google Chrome Seccomp-BPF input validation | 20 | Unproven | Official fix | CVE-2014-1733 |