Beveiligingsadvies

CVE-2014-1733

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-04-26 10:00:00
Laatst bijgewerkt 2024-08-06 09:50:11
Toegewezen door Chrome
CVSS-score geen score
Status PUBLISHED

Beschrijving

The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.