CVE-2014-3157

Severity Score

8.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

Desbordamiento de buffer basado en memoria dinámica en la función FFmpegVideoDecoder::GetVideoBuffer en media/filters/ffmpeg_video_decoder.cc en Google Chrome anterior a 35.0.1916.153 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante el aprovechamiento de estructuras de datos VideoFrame que son demasiado pequeñas para la interacción debida con una libraría FFmpeg subyacente.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-05-03 CVE Reserved
2014-06-11 CVE Published
2024-01-22 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (10)

URL	Tag	Source
http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html	X_refsource_confirm
http://secunia.com/advisories/58585	Third Party Advisory
http://secunia.com/advisories/59090	Third Party Advisory
http://secunia.com/advisories/60061	Third Party Advisory
http://secunia.com/advisories/60372	Third Party Advisory
http://www.securityfocus.com/bid/67972	Vdb Entry
https://code.google.com/p/chromium/issues/detail?id=368980	X_refsource_confirm
https://src.chromium.org/viewvc/chrome?revision=268831&view=revision	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://security.gentoo.org/glsa/glsa-201408-16.xml	2023-11-07
http://www.debian.org/security/2014/dsa-2959	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				<= 35.0.1916.152 Search vendor "Google" for product "Chrome" and version " <= 35.0.1916.152"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.0 Search vendor "Google" for product "Chrome" and version "35.0.1916.0"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.1 Search vendor "Google" for product "Chrome" and version "35.0.1916.1"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.2 Search vendor "Google" for product "Chrome" and version "35.0.1916.2"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.3 Search vendor "Google" for product "Chrome" and version "35.0.1916.3"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.4 Search vendor "Google" for product "Chrome" and version "35.0.1916.4"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.5 Search vendor "Google" for product "Chrome" and version "35.0.1916.5"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.6 Search vendor "Google" for product "Chrome" and version "35.0.1916.6"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.7 Search vendor "Google" for product "Chrome" and version "35.0.1916.7"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.8 Search vendor "Google" for product "Chrome" and version "35.0.1916.8"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.9 Search vendor "Google" for product "Chrome" and version "35.0.1916.9"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.10 Search vendor "Google" for product "Chrome" and version "35.0.1916.10"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.11 Search vendor "Google" for product "Chrome" and version "35.0.1916.11"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.13 Search vendor "Google" for product "Chrome" and version "35.0.1916.13"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.14 Search vendor "Google" for product "Chrome" and version "35.0.1916.14"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.15 Search vendor "Google" for product "Chrome" and version "35.0.1916.15"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.17 Search vendor "Google" for product "Chrome" and version "35.0.1916.17"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.18 Search vendor "Google" for product "Chrome" and version "35.0.1916.18"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.19 Search vendor "Google" for product "Chrome" and version "35.0.1916.19"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.20 Search vendor "Google" for product "Chrome" and version "35.0.1916.20"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.21 Search vendor "Google" for product "Chrome" and version "35.0.1916.21"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.22 Search vendor "Google" for product "Chrome" and version "35.0.1916.22"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.23 Search vendor "Google" for product "Chrome" and version "35.0.1916.23"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.27 Search vendor "Google" for product "Chrome" and version "35.0.1916.27"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.31 Search vendor "Google" for product "Chrome" and version "35.0.1916.31"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.32 Search vendor "Google" for product "Chrome" and version "35.0.1916.32"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.33 Search vendor "Google" for product "Chrome" and version "35.0.1916.33"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.34 Search vendor "Google" for product "Chrome" and version "35.0.1916.34"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.35 Search vendor "Google" for product "Chrome" and version "35.0.1916.35"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.36 Search vendor "Google" for product "Chrome" and version "35.0.1916.36"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.37 Search vendor "Google" for product "Chrome" and version "35.0.1916.37"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.38 Search vendor "Google" for product "Chrome" and version "35.0.1916.38"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.39 Search vendor "Google" for product "Chrome" and version "35.0.1916.39"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.40 Search vendor "Google" for product "Chrome" and version "35.0.1916.40"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.41 Search vendor "Google" for product "Chrome" and version "35.0.1916.41"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.42 Search vendor "Google" for product "Chrome" and version "35.0.1916.42"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.43 Search vendor "Google" for product "Chrome" and version "35.0.1916.43"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.44 Search vendor "Google" for product "Chrome" and version "35.0.1916.44"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.45 Search vendor "Google" for product "Chrome" and version "35.0.1916.45"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.46 Search vendor "Google" for product "Chrome" and version "35.0.1916.46"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.47 Search vendor "Google" for product "Chrome" and version "35.0.1916.47"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.48 Search vendor "Google" for product "Chrome" and version "35.0.1916.48"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.49 Search vendor "Google" for product "Chrome" and version "35.0.1916.49"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.51 Search vendor "Google" for product "Chrome" and version "35.0.1916.51"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.52 Search vendor "Google" for product "Chrome" and version "35.0.1916.52"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.54 Search vendor "Google" for product "Chrome" and version "35.0.1916.54"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.56 Search vendor "Google" for product "Chrome" and version "35.0.1916.56"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.57 Search vendor "Google" for product "Chrome" and version "35.0.1916.57"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.59 Search vendor "Google" for product "Chrome" and version "35.0.1916.59"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.61 Search vendor "Google" for product "Chrome" and version "35.0.1916.61"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.68 Search vendor "Google" for product "Chrome" and version "35.0.1916.68"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.69 Search vendor "Google" for product "Chrome" and version "35.0.1916.69"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.71 Search vendor "Google" for product "Chrome" and version "35.0.1916.71"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.72 Search vendor "Google" for product "Chrome" and version "35.0.1916.72"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.74 Search vendor "Google" for product "Chrome" and version "35.0.1916.74"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.77 Search vendor "Google" for product "Chrome" and version "35.0.1916.77"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.80 Search vendor "Google" for product "Chrome" and version "35.0.1916.80"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.82 Search vendor "Google" for product "Chrome" and version "35.0.1916.82"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.84 Search vendor "Google" for product "Chrome" and version "35.0.1916.84"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.85 Search vendor "Google" for product "Chrome" and version "35.0.1916.85"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.86 Search vendor "Google" for product "Chrome" and version "35.0.1916.86"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.88 Search vendor "Google" for product "Chrome" and version "35.0.1916.88"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.90 Search vendor "Google" for product "Chrome" and version "35.0.1916.90"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.92 Search vendor "Google" for product "Chrome" and version "35.0.1916.92"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.93 Search vendor "Google" for product "Chrome" and version "35.0.1916.93"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.95 Search vendor "Google" for product "Chrome" and version "35.0.1916.95"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.96 Search vendor "Google" for product "Chrome" and version "35.0.1916.96"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.98 Search vendor "Google" for product "Chrome" and version "35.0.1916.98"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.99 Search vendor "Google" for product "Chrome" and version "35.0.1916.99"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.101 Search vendor "Google" for product "Chrome" and version "35.0.1916.101"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.103 Search vendor "Google" for product "Chrome" and version "35.0.1916.103"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.104 Search vendor "Google" for product "Chrome" and version "35.0.1916.104"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.105 Search vendor "Google" for product "Chrome" and version "35.0.1916.105"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.106 Search vendor "Google" for product "Chrome" and version "35.0.1916.106"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.107 Search vendor "Google" for product "Chrome" and version "35.0.1916.107"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.108 Search vendor "Google" for product "Chrome" and version "35.0.1916.108"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.109 Search vendor "Google" for product "Chrome" and version "35.0.1916.109"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.110 Search vendor "Google" for product "Chrome" and version "35.0.1916.110"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.111 Search vendor "Google" for product "Chrome" and version "35.0.1916.111"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.112 Search vendor "Google" for product "Chrome" and version "35.0.1916.112"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.113 Search vendor "Google" for product "Chrome" and version "35.0.1916.113"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.114 Search vendor "Google" for product "Chrome" and version "35.0.1916.114"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.115 Search vendor "Google" for product "Chrome" and version "35.0.1916.115"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.116 Search vendor "Google" for product "Chrome" and version "35.0.1916.116"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.117 Search vendor "Google" for product "Chrome" and version "35.0.1916.117"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.118 Search vendor "Google" for product "Chrome" and version "35.0.1916.118"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.119 Search vendor "Google" for product "Chrome" and version "35.0.1916.119"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.120 Search vendor "Google" for product "Chrome" and version "35.0.1916.120"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.121 Search vendor "Google" for product "Chrome" and version "35.0.1916.121"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.122 Search vendor "Google" for product "Chrome" and version "35.0.1916.122"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.123 Search vendor "Google" for product "Chrome" and version "35.0.1916.123"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.124 Search vendor "Google" for product "Chrome" and version "35.0.1916.124"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.125 Search vendor "Google" for product "Chrome" and version "35.0.1916.125"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.126 Search vendor "Google" for product "Chrome" and version "35.0.1916.126"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.127 Search vendor "Google" for product "Chrome" and version "35.0.1916.127"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.128 Search vendor "Google" for product "Chrome" and version "35.0.1916.128"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.137 Search vendor "Google" for product "Chrome" and version "35.0.1916.137"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.138 Search vendor "Google" for product "Chrome" and version "35.0.1916.138"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.140 Search vendor "Google" for product "Chrome" and version "35.0.1916.140"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.141 Search vendor "Google" for product "Chrome" and version "35.0.1916.141"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.142 Search vendor "Google" for product "Chrome" and version "35.0.1916.142"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.149 Search vendor "Google" for product "Chrome" and version "35.0.1916.149"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.150 Search vendor "Google" for product "Chrome" and version "35.0.1916.150"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				35.0.1916.151 Search vendor "Google" for product "Chrome" and version "35.0.1916.151"		-		Affected