CVE-2014-1736
HighSummary
Integer overflow in api.cc in Google V8, used in Google Chrome before version 34.0.1847.131 on Windows and OS X and before version 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
Risk Assessment
An attacker could exploit this vulnerability to cause a denial of service, potentially leading to application downtime and affecting service availability for users.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Google V8, Google Chrome
See all- CVE-2016-5129High
Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, allowing remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
- CVE-2016-5128High
In Google V8 before version 5.2.361.27 and in Google Chrome before version 52.0.2743.82, there is a vulnerability that allows API interceptors to modify a store target without setting a property. This enables remote attackers to bypass the Same Origin Policy via a crafted website.
- CVE-2016-1669High
The Zone::New function in Google V8 before version 5.0.71.47 and in Google Chrome before version 50.0.2661.102 does not properly determine when to expand certain memory allocations. This can lead to denial of service (buffer overflow) or other unspecified impacts via crafted JavaScript code.
- CVE-2016-1653High
The LoadBuffer implementation in Google V8, used in Google Chrome before version 50.0.2661.75, mishandles data types, allowing remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation.
- CVE-2016-1612High
The LoadIC::UpdateCaches function in Google V8, used in Google Chrome before version 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable. This allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.
- CVE-2015-3910High
Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome before 43.0.2357.65, may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- CVE-2015-3333High
Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- CVE-2015-1242High
The ReduceTransitionElementsKind function in Google V8 before version 4.2.77.8, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages 'type confusion' in the check-elimination optimization.
- CVE-2015-2238High
Multiple unspecified vulnerabilities in Google V8 before version 4.1.0.21, as used in Google Chrome before version 41.0.2272.76, may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- CVE-2015-1346High
Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Original NVD description (English source)
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.