CVE-2014-1730 (GCVE-0-2014-1730)
Vulnerability from cvelistv5
Published
2014-04-26 10:00
Modified
2024-08-06 09:50
Severity ?
CWE
  • n/a
Summary
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.
References
chrome-cve-admin@google.com http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html
chrome-cve-admin@google.com http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html
chrome-cve-admin@google.com http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html
chrome-cve-admin@google.com http://secunia.com/advisories/58301
chrome-cve-admin@google.com http://secunia.com/advisories/60372
chrome-cve-admin@google.com http://security.gentoo.org/glsa/glsa-201408-16.xml
chrome-cve-admin@google.com http://www.debian.org/security/2014/dsa-2920
chrome-cve-admin@google.com https://code.google.com/p/chromium/issues/detail?id=354967
chrome-cve-admin@google.com https://code.google.com/p/v8/source/detail?r=20375
chrome-cve-admin@google.com https://code.google.com/p/v8/source/detail?r=20377
chrome-cve-admin@google.com https://code.google.com/p/v8/source/detail?r=20388
chrome-cve-admin@google.com https://code.google.com/p/v8/source/detail?r=20593
chrome-cve-admin@google.com https://code.google.com/p/v8/source/detail?r=20595
af854a3a-2127-422b-91ae-364da2661108 http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html
af854a3a-2127-422b-91ae-364da2661108 http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html
af854a3a-2127-422b-91ae-364da2661108 http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/58301
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/60372
af854a3a-2127-422b-91ae-364da2661108 http://security.gentoo.org/glsa/glsa-201408-16.xml
af854a3a-2127-422b-91ae-364da2661108 http://www.debian.org/security/2014/dsa-2920
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/chromium/issues/detail?id=354967
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/v8/source/detail?r=20375
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/v8/source/detail?r=20377
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/v8/source/detail?r=20388
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/v8/source/detail?r=20593
af854a3a-2127-422b-91ae-364da2661108 https://code.google.com/p/v8/source/detail?r=20595
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:50:11.049Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "58301",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58301"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/v8/source/detail?r=20388"
          },
          {
            "name": "openSUSE-SU-2014:0669",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/v8/source/detail?r=20593"
          },
          {
            "name": "GLSA-201408-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201408-16.xml"
          },
          {
            "name": "60372",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60372"
          },
          {
            "name": "openSUSE-SU-2014:0668",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html"
          },
          {
            "name": "DSA-2920",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2920"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/v8/source/detail?r=20375"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/v8/source/detail?r=20595"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/chromium/issues/detail?id=354967"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://code.google.com/p/v8/source/detail?r=20377"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-04-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T20:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "58301",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58301"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/v8/source/detail?r=20388"
        },
        {
          "name": "openSUSE-SU-2014:0669",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/v8/source/detail?r=20593"
        },
        {
          "name": "GLSA-201408-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201408-16.xml"
        },
        {
          "name": "60372",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60372"
        },
        {
          "name": "openSUSE-SU-2014:0668",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html"
        },
        {
          "name": "DSA-2920",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2920"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/v8/source/detail?r=20375"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/v8/source/detail?r=20595"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/chromium/issues/detail?id=354967"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://code.google.com/p/v8/source/detail?r=20377"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2014-1730",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "58301",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58301"
            },
            {
              "name": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html",
              "refsource": "CONFIRM",
              "url": "http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html"
            },
            {
              "name": "https://code.google.com/p/v8/source/detail?r=20388",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/v8/source/detail?r=20388"
            },
            {
              "name": "openSUSE-SU-2014:0669",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html"
            },
            {
              "name": "https://code.google.com/p/v8/source/detail?r=20593",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/v8/source/detail?r=20593"
            },
            {
              "name": "GLSA-201408-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201408-16.xml"
            },
            {
              "name": "60372",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60372"
            },
            {
              "name": "openSUSE-SU-2014:0668",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html"
            },
            {
              "name": "DSA-2920",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2920"
            },
            {
              "name": "https://code.google.com/p/v8/source/detail?r=20375",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/v8/source/detail?r=20375"
            },
            {
              "name": "https://code.google.com/p/v8/source/detail?r=20595",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/v8/source/detail?r=20595"
            },
            {
              "name": "https://code.google.com/p/chromium/issues/detail?id=354967",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/chromium/issues/detail?id=354967"
            },
            {
              "name": "https://code.google.com/p/v8/source/detail?r=20377",
              "refsource": "CONFIRM",
              "url": "https://code.google.com/p/v8/source/detail?r=20377"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2014-1730",
    "datePublished": "2014-04-26T10:00:00",
    "dateReserved": "2014-01-29T00:00:00",
    "dateUpdated": "2024-08-06T09:50:11.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2014-1730\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2014-04-26T10:55:05.433\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \\\"type confusion\\\" and reading property values, related to i18n.js and runtime.cc.\"},{\"lang\":\"es\",\"value\":\"Google V8, utilizado en Google Chrome anterior a 34.0.1847.131 en Windows y OS X y anterior a 34.0.1847.132 en Linux, no almacena debidamente metadatos de internacionalizaci\u00f3n, lo que permite a atacantes remotos evadir restricciones de acceso mediante el aprovechamiento de \\\"confusi\u00f3n de tipo\\\" y la lectura de valores de propiedad, relacionado con i18n.js y runtime.cc.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"34.0.1847.131\",\"matchCriteriaId\":\"59F9F3BD-65CD-462B-A3CD-D970F48AABAB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"34.0.1847.132\",\"matchCriteriaId\":\"682715EE-1BA1-4A6B-AEB6-B99257B38A45\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}],\"references\":[{\"url\":\"http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://secunia.com/advisories/58301\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://secunia.com/advisories/60372\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-201408-16.xml\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2014/dsa-2920\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=354967\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20375\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20377\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20388\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20593\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20595\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/58301\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60372\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-201408-16.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2014/dsa-2920\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/chromium/issues/detail?id=354967\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20375\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20377\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20388\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20593\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://code.google.com/p/v8/source/detail?r=20595\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…