CVE-2014-1708

2014-03-1614:06:45

Chrome

web.nvd.nist.gov

cve-2014-1708

google chrome os

remote code execution

file persistence

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.002

Percentile

51.4%

JSON

The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

googlechrome_osRange≤33.0.1750.149

googlechrome_osMatch33.0.1750.2

googlechrome_osMatch33.0.1750.5

googlechrome_osMatch33.0.1750.16

googlechrome_osMatch33.0.1750.29

googlechrome_osMatch33.0.1750.51

googlechrome_osMatch33.0.1750.58

googlechrome_osMatch33.0.1750.70

googlechrome_osMatch33.0.1750.93

googlechrome_osMatch33.0.1750.112

googlechrome_osMatch33.0.1750.124

VendorProductVersionCPE
googlechrome_os*cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
googlechrome_os33.0.1750.2cpe:2.3:o:google:chrome_os:33.0.1750.2:*:*:*:*:*:*:*
googlechrome_os33.0.1750.5cpe:2.3:o:google:chrome_os:33.0.1750.5:*:*:*:*:*:*:*
googlechrome_os33.0.1750.16cpe:2.3:o:google:chrome_os:33.0.1750.16:*:*:*:*:*:*:*
googlechrome_os33.0.1750.29cpe:2.3:o:google:chrome_os:33.0.1750.29:*:*:*:*:*:*:*
googlechrome_os33.0.1750.51cpe:2.3:o:google:chrome_os:33.0.1750.51:*:*:*:*:*:*:*
googlechrome_os33.0.1750.58cpe:2.3:o:google:chrome_os:33.0.1750.58:*:*:*:*:*:*:*
googlechrome_os33.0.1750.70cpe:2.3:o:google:chrome_os:33.0.1750.70:*:*:*:*:*:*:*
googlechrome_os33.0.1750.93cpe:2.3:o:google:chrome_os:33.0.1750.93:*:*:*:*:*:*:*
googlechrome_os33.0.1750.112cpe:2.3:o:google:chrome_os:33.0.1750.112:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome_os	*	cpe:2.3:o:google:chrome_os::::::::
google	chrome_os	33.0.1750.2	cpe:2.3:o:google:chrome_os:33.0.1750.2:::::::*
google	chrome_os	33.0.1750.5	cpe:2.3:o:google:chrome_os:33.0.1750.5:::::::*
google	chrome_os	33.0.1750.16	cpe:2.3:o:google:chrome_os:33.0.1750.16:::::::*
google	chrome_os	33.0.1750.29	cpe:2.3:o:google:chrome_os:33.0.1750.29:::::::*
google	chrome_os	33.0.1750.51	cpe:2.3:o:google:chrome_os:33.0.1750.51:::::::*
google	chrome_os	33.0.1750.58	cpe:2.3:o:google:chrome_os:33.0.1750.58:::::::*
google	chrome_os	33.0.1750.70	cpe:2.3:o:google:chrome_os:33.0.1750.70:::::::*
google	chrome_os	33.0.1750.93	cpe:2.3:o:google:chrome_os:33.0.1750.93:::::::*
google	chrome_os	33.0.1750.112	cpe:2.3:o:google:chrome_os:33.0.1750.112:::::::*