CVE-2014-3175
published 2014-08-27CVE-2014-3175: Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via…
PriorityP334critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
1.47%
71.3th percentile
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
Affected
82 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 37.0.2062.93 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6r8w-w6r7-497f: Multiple unspecified vulnerabilities in Google Chrome before 37
ghsa_unreviewed·2022-05-17
CVE-2014-3175 [HIGH] GHSA-6r8w-w6r7-497f: Multiple unspecified vulnerabilities in Google Chrome before 37
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
OSV
oxide-qt vulnerabilities
osv·2014-09-02·CVSS 7.5
CVE-2014-3168 [HIGH] oxide-qt vulnerabilities
oxide-qt vulnerabilities
A use-after-free was discovered in the SVG implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2014-3168)
A use-after-free was discovered in the DOM implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2014-3169)
A use-after-free was discovered in V8. If a user were tricked in to
opening a specially crafted website, an attacker could potenti
OSV
CVE-2014-3175: Multiple unspecified vulnerabilities in Google Chrome before 37
osv·2014-08-26·CVSS 10.0
CVE-2014-3175 [CRITICAL] CVE-2014-3175: Multiple unspecified vulnerabilities in Google Chrome before 37
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
Ubuntu
Oxide vulnerabilities
vendor_ubuntu·2014-09-02·CVSS 7.5
CVE-2014-3168 [HIGH] Oxide vulnerabilities
Title: Oxide vulnerabilities
Summary: Several security issues were fixed in Oxide.
A use-after-free was discovered in the SVG implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2014-3168)
A use-after-free was discovered in the DOM implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2014-3169)
A use-after-free was discovered in V8. If a user were tricked in to
ope
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.htmlhttp://secunia.com/advisories/60268http://secunia.com/advisories/60424http://security.gentoo.org/glsa/glsa-201408-16.xmlhttp://www.debian.org/security/2014/dsa-3039http://www.securityfocus.com/bid/69402http://www.securitytracker.com/id/1030767https://code.google.com/p/chromium/issues/detail?id=149871https://code.google.com/p/chromium/issues/detail?id=337572https://code.google.com/p/chromium/issues/detail?id=350782https://code.google.com/p/chromium/issues/detail?id=357452https://code.google.com/p/chromium/issues/detail?id=364062https://code.google.com/p/chromium/issues/detail?id=366687https://code.google.com/p/chromium/issues/detail?id=367991https://code.google.com/p/chromium/issues/detail?id=368978https://code.google.com/p/chromium/issues/detail?id=372410https://code.google.com/p/chromium/issues/detail?id=372413https://code.google.com/p/chromium/issues/detail?id=379656https://code.google.com/p/chromium/issues/detail?id=381031https://code.google.com/p/chromium/issues/detail?id=381244https://code.google.com/p/chromium/issues/detail?id=381521https://code.google.com/p/chromium/issues/detail?id=382240https://code.google.com/p/chromium/issues/detail?id=382241https://code.google.com/p/chromium/issues/detail?id=382242https://code.google.com/p/chromium/issues/detail?id=382243https://code.google.com/p/chromium/issues/detail?id=382601https://code.google.com/p/chromium/issues/detail?id=382606https://code.google.com/p/chromium/issues/detail?id=382639https://code.google.com/p/chromium/issues/detail?id=382656https://code.google.com/p/chromium/issues/detail?id=382820https://code.google.com/p/chromium/issues/detail?id=383703https://code.google.com/p/chromium/issues/detail?id=384662https://code.google.com/p/chromium/issues/detail?id=387016https://code.google.com/p/chromium/issues/detail?id=387315https://code.google.com/p/chromium/issues/detail?id=387371https://code.google.com/p/chromium/issues/detail?id=388771https://code.google.com/p/chromium/issues/detail?id=389216https://code.google.com/p/chromium/issues/detail?id=389280https://code.google.com/p/chromium/issues/detail?id=389285https://code.google.com/p/chromium/issues/detail?id=389316https://code.google.com/p/chromium/issues/detail?id=389570https://code.google.com/p/chromium/issues/detail?id=390176https://code.google.com/p/chromium/issues/detail?id=390304https://code.google.com/p/chromium/issues/detail?id=393938https://code.google.com/p/chromium/issues/detail?id=394026https://code.google.com/p/chromium/issues/detail?id=395972https://code.google.com/p/chromium/issues/detail?id=396255https://code.google.com/p/chromium/issues/detail?id=397258https://crbug.com/406143https://exchange.xforce.ibmcloud.com/vulnerabilities/95475http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.htmlhttp://secunia.com/advisories/60268http://secunia.com/advisories/60424http://security.gentoo.org/glsa/glsa-201408-16.xmlhttp://www.debian.org/security/2014/dsa-3039http://www.securityfocus.com/bid/69402http://www.securitytracker.com/id/1030767https://code.google.com/p/chromium/issues/detail?id=149871https://code.google.com/p/chromium/issues/detail?id=337572https://code.google.com/p/chromium/issues/detail?id=350782https://code.google.com/p/chromium/issues/detail?id=357452https://code.google.com/p/chromium/issues/detail?id=364062https://code.google.com/p/chromium/issues/detail?id=366687https://code.google.com/p/chromium/issues/detail?id=367991https://code.google.com/p/chromium/issues/detail?id=368978https://code.google.com/p/chromium/issues/detail?id=372410https://code.google.com/p/chromium/issues/detail?id=372413https://code.google.com/p/chromium/issues/detail?id=379656https://code.google.com/p/chromium/issues/detail?id=381031https://code.google.com/p/chromium/issues/detail?id=381244https://code.google.com/p/chromium/issues/detail?id=381521https://code.google.com/p/chromium/issues/detail?id=382240https://code.google.com/p/chromium/issues/detail?id=382241https://code.google.com/p/chromium/issues/detail?id=382242https://code.google.com/p/chromium/issues/detail?id=382243https://code.google.com/p/chromium/issues/detail?id=382601https://code.google.com/p/chromium/issues/detail?id=382606https://code.google.com/p/chromium/issues/detail?id=382639https://code.google.com/p/chromium/issues/detail?id=382656https://code.google.com/p/chromium/issues/detail?id=382820https://code.google.com/p/chromium/issues/detail?id=383703https://code.google.com/p/chromium/issues/detail?id=384662https://code.google.com/p/chromium/issues/detail?id=387016https://code.google.com/p/chromium/issues/detail?id=387315https://code.google.com/p/chromium/issues/detail?id=387371https://code.google.com/p/chromium/issues/detail?id=388771https://code.google.com/p/chromium/issues/detail?id=389216https://code.google.com/p/chromium/issues/detail?id=389280https://code.google.com/p/chromium/issues/detail?id=389285https://code.google.com/p/chromium/issues/detail?id=389316https://code.google.com/p/chromium/issues/detail?id=389570https://code.google.com/p/chromium/issues/detail?id=390176https://code.google.com/p/chromium/issues/detail?id=390304https://code.google.com/p/chromium/issues/detail?id=393938https://code.google.com/p/chromium/issues/detail?id=394026https://code.google.com/p/chromium/issues/detail?id=395972https://code.google.com/p/chromium/issues/detail?id=396255https://code.google.com/p/chromium/issues/detail?id=397258
+ 2 more references
2014-08-27
Published