QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1733

Published: Apr 26, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html

x_refsource_CONFIRM

openSUSE-SU-2014:0669

vendor-advisory

x_refsource_SUSE

https://code.google.com/p/chromium/issues/detail?id=351103

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

openSUSE-SU-2014:0668

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

https://src.chromium.org/viewvc/chrome?revision=260157&view=revision

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.