CVE-2014-1746: Buffer Overflow
The InMemoryUrlProtocol::Read function in media/filters/inmemoryurlprotocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1746?
CVE-2014-1746 is classified as a moderate severity vulnerability that can lead to denial of service.
How do I fix CVE-2014-1746?
To fix CVE-2014-1746, update Google Chrome to version 35.0.1916.114 or later.
What is affected by CVE-2014-1746?
CVE-2014-1746 affects versions of Google Chrome prior to 35.0.1916.114.
What kind of attack can exploit CVE-2014-1746?
CVE-2014-1746 can be exploited by remote attackers to cause an out-of-bounds read, potentially leading to a denial of service.
Is CVE-2014-1746 targeted at specific operating systems?
CVE-2014-1746 targets the Google Chrome browser, which runs on multiple operating systems.