7.5

CVE-2014-3157

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 35.0.1916.152
Google ≫ Chrome Version 35.0.1916.0
Google ≫ Chrome Version 35.0.1916.1
Google ≫ Chrome Version 35.0.1916.2
Google ≫ Chrome Version 35.0.1916.3
Google ≫ Chrome Version 35.0.1916.4
Google ≫ Chrome Version 35.0.1916.5
Google ≫ Chrome Version 35.0.1916.6
Google ≫ Chrome Version 35.0.1916.7
Google ≫ Chrome Version 35.0.1916.8
Google ≫ Chrome Version 35.0.1916.9
Google ≫ Chrome Version 35.0.1916.10
Google ≫ Chrome Version 35.0.1916.11
Google ≫ Chrome Version 35.0.1916.13
Google ≫ Chrome Version 35.0.1916.14
Google ≫ Chrome Version 35.0.1916.15
Google ≫ Chrome Version 35.0.1916.17
Google ≫ Chrome Version 35.0.1916.18
Google ≫ Chrome Version 35.0.1916.19
Google ≫ Chrome Version 35.0.1916.20
Google ≫ Chrome Version 35.0.1916.21
Google ≫ Chrome Version 35.0.1916.22
Google ≫ Chrome Version 35.0.1916.23
Google ≫ Chrome Version 35.0.1916.27
Google ≫ Chrome Version 35.0.1916.31
Google ≫ Chrome Version 35.0.1916.32
Google ≫ Chrome Version 35.0.1916.33
Google ≫ Chrome Version 35.0.1916.34
Google ≫ Chrome Version 35.0.1916.35
Google ≫ Chrome Version 35.0.1916.36
Google ≫ Chrome Version 35.0.1916.37
Google ≫ Chrome Version 35.0.1916.38
Google ≫ Chrome Version 35.0.1916.39
Google ≫ Chrome Version 35.0.1916.40
Google ≫ Chrome Version 35.0.1916.41
Google ≫ Chrome Version 35.0.1916.42
Google ≫ Chrome Version 35.0.1916.43
Google ≫ Chrome Version 35.0.1916.44
Google ≫ Chrome Version 35.0.1916.45
Google ≫ Chrome Version 35.0.1916.46
Google ≫ Chrome Version 35.0.1916.47
Google ≫ Chrome Version 35.0.1916.48
Google ≫ Chrome Version 35.0.1916.49
Google ≫ Chrome Version 35.0.1916.51
Google ≫ Chrome Version 35.0.1916.52
Google ≫ Chrome Version 35.0.1916.54
Google ≫ Chrome Version 35.0.1916.56
Google ≫ Chrome Version 35.0.1916.57
Google ≫ Chrome Version 35.0.1916.59
Google ≫ Chrome Version 35.0.1916.61
Google ≫ Chrome Version 35.0.1916.68
Google ≫ Chrome Version 35.0.1916.69
Google ≫ Chrome Version 35.0.1916.71
Google ≫ Chrome Version 35.0.1916.72
Google ≫ Chrome Version 35.0.1916.74
Google ≫ Chrome Version 35.0.1916.77
Google ≫ Chrome Version 35.0.1916.80
Google ≫ Chrome Version 35.0.1916.82
Google ≫ Chrome Version 35.0.1916.84
Google ≫ Chrome Version 35.0.1916.85
Google ≫ Chrome Version 35.0.1916.86
Google ≫ Chrome Version 35.0.1916.88
Google ≫ Chrome Version 35.0.1916.90
Google ≫ Chrome Version 35.0.1916.92
Google ≫ Chrome Version 35.0.1916.93
Google ≫ Chrome Version 35.0.1916.95
Google ≫ Chrome Version 35.0.1916.96
Google ≫ Chrome Version 35.0.1916.98
Google ≫ Chrome Version 35.0.1916.99
Google ≫ Chrome Version 35.0.1916.101
Google ≫ Chrome Version 35.0.1916.103
Google ≫ Chrome Version 35.0.1916.104
Google ≫ Chrome Version 35.0.1916.105
Google ≫ Chrome Version 35.0.1916.106
Google ≫ Chrome Version 35.0.1916.107
Google ≫ Chrome Version 35.0.1916.108
Google ≫ Chrome Version 35.0.1916.109
Google ≫ Chrome Version 35.0.1916.110
Google ≫ Chrome Version 35.0.1916.111
Google ≫ Chrome Version 35.0.1916.112
Google ≫ Chrome Version 35.0.1916.113
Google ≫ Chrome Version 35.0.1916.114
Google ≫ Chrome Version 35.0.1916.115
Google ≫ Chrome Version 35.0.1916.116
Google ≫ Chrome Version 35.0.1916.117
Google ≫ Chrome Version 35.0.1916.118
Google ≫ Chrome Version 35.0.1916.119
Google ≫ Chrome Version 35.0.1916.120
Google ≫ Chrome Version 35.0.1916.121
Google ≫ Chrome Version 35.0.1916.122
Google ≫ Chrome Version 35.0.1916.123
Google ≫ Chrome Version 35.0.1916.124
Google ≫ Chrome Version 35.0.1916.125
Google ≫ Chrome Version 35.0.1916.126
Google ≫ Chrome Version 35.0.1916.127
Google ≫ Chrome Version 35.0.1916.128
Google ≫ Chrome Version 35.0.1916.137
Google ≫ Chrome Version 35.0.1916.138
Google ≫ Chrome Version 35.0.1916.140
Google ≫ Chrome Version 35.0.1916.141
Google ≫ Chrome Version 35.0.1916.142
Google ≫ Chrome Version 35.0.1916.149
Google ≫ Chrome Version 35.0.1916.150
Google ≫ Chrome Version 35.0.1916.151
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.76% 0.754
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://security.gentoo.org/glsa/glsa-201408-16.xml
http://secunia.com/advisories/60372
http://secunia.com/advisories/58585
http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html
http://secunia.com/advisories/59090
http://secunia.com/advisories/60061
http://www.debian.org/security/2014/dsa-2959
http://www.securityfocus.com/bid/67972
https://code.google.com/p/chromium/issues/detail?id=368980
https://src.chromium.org/viewvc/chrome?revision=268831&view=revision