CVE-2014-3174 in Chrome

Resumen (Inglés)

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2014-05-03

Divulgación

2014-08-26

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
67416	Google Chrome Web Audio desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2014-3174

Fuentes

• MITRE
• NVD
• CVE Details