CVE-2014-1731
High
Description
core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Google Chrome
PublishedApr 26, 2014
First seenApr 26, 2014
How to fix
Update
- google chrome34.0.1847.131, 34.0.1847.132 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google chrome | v < 34.0.1847.131, v < 34.0.1847.132 | 34.0.1847.131, 34.0.1847.132 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.