CVE-2014-1733 in Chrome

Sumário (Inglês)

The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

29/01/2014

Divulgação

26/04/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
13082	Google Chrome Seccomp-BPF Elevação de Privilégios	20	Não provado	Correção oficial	CVE-2014-1733

Fontes

• MITRE
• NVD
• CVE Details