Homepage

Numeric Errors The advisory has been revoked - it doesn't affect any version of package chromium-browser  (opens in a new tab)

Threat Intelligence

EPSS
1.41% (87th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-CHROMIUMBROWSER-632312
  • published9 Apr 2014
  • disclosed9 Apr 2014
Report a new vulnerability Found a mistake?

Introduced: 9 Apr 2014

CVE-2014-1718  (opens in a new tab)
CWE-189  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream chromium-browser package and not the chromium-browser package as distributed by Ubuntu.

Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted mapping of a large amount of renderer memory.