製品・ソフトウェアに関する情報

JVN脆弱性詳細

Google Chrome の media/filters/ffmpeg_video_decoder.cc におけるヒープベースのバッファオーバーフローの脆弱性

Title	Google Chrome の media/filters/ffmpeg_video_decoder.cc におけるヒープベースのバッファオーバーフローの脆弱性
Summary	Google Chrome の media/filters/ffmpeg_video_decoder.cc の FFmpegVideoDecoder::GetVideoBuffer 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、下層の FFmpeg ライブラリとの適切な相互作用のためには小さすぎる VideoFrame データ構造を利用されることで、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 10, 2014, midnight
Registration Date	June 12, 2014, 3:42 p.m.
Last Update	June 12, 2014, 3:42 p.m.

CVSS2.0 : 危険
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected System

Google

Google Chrome 35.0.1916.153 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-3157	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3157
National Vulnerability Database (NVD)
2	CVE-2014-3157	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3157

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Chromium
1	Revision 268831	https://src.chromium.org/viewvc/chrome?revision=268831&view=revision
Google
2	Google Chrome	https://www.google.com/intl/en/chrome/
3	Stable Channel Update	http://googlechromereleases.blogspot.jp/2014/06/stable-channel-update.html

Change Log

No	Changed Details	Date of change
0	[2014年06月12日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2014-3157

Summary	Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.
Publication Date	June 11, 2014, 7:57 p.m.
Registration Date	Jan. 26, 2021, 3:10 p.m.
Last Update	Nov. 21, 2024, 11:07 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:35.0.1916.114:::::::*
cpe:2.3:a:google:chrome:35.0.1916.99:::::::*
cpe:2.3:a:google:chrome:35.0.1916.57:::::::*
cpe:2.3:a:google:chrome:35.0.1916.122:::::::*
cpe:2.3:a:google:chrome:35.0.1916.3:::::::*
cpe:2.3:a:google:chrome:35.0.1916.38:::::::*
cpe:2.3:a:google:chrome:35.0.1916.105:::::::*
cpe:2.3:a:google:chrome:35.0.1916.128:::::::*
cpe:2.3:a:google:chrome:35.0.1916.95:::::::*
cpe:2.3:a:google:chrome:35.0.1916.52:::::::*
cpe:2.3:a:google:chrome:35.0.1916.82:::::::*
cpe:2.3:a:google:chrome:35.0.1916.42:::::::*
cpe:2.3:a:google:chrome:35.0.1916.36:::::::*
cpe:2.3:a:google:chrome:35.0.1916.111:::::::*
cpe:2.3:a:google:chrome:35.0.1916.124:::::::*
cpe:2.3:a:google:chrome:35.0.1916.61:::::::*
cpe:2.3:a:google:chrome:35.0.1916.98:::::::*
cpe:2.3:a:google:chrome:35.0.1916.47:::::::*
cpe:2.3:a:google:chrome:35.0.1916.110:::::::*
cpe:2.3:a:google:chrome:35.0.1916.10:::::::*
cpe:2.3:a:google:chrome:35.0.1916.20:::::::*
cpe:2.3:a:google:chrome:35.0.1916.85:::::::*
cpe:2.3:a:google:chrome:35.0.1916.9:::::::*
cpe:2.3:a:google:chrome:35.0.1916.92:::::::*
cpe:2.3:a:google:chrome:35.0.1916.119:::::::*
cpe:2.3:a:google:chrome:35.0.1916.23:::::::*
cpe:2.3:a:google:chrome:35.0.1916.49:::::::*
cpe:2.3:a:google:chrome:35.0.1916.54:::::::*
cpe:2.3:a:google:chrome:35.0.1916.106:::::::*
cpe:2.3:a:google:chrome:35.0.1916.35:::::::*
cpe:2.3:a:google:chrome:35.0.1916.33:::::::*
cpe:2.3:a:google:chrome:35.0.1916.5:::::::*
cpe:2.3:a:google:chrome:35.0.1916.11:::::::*
cpe:2.3:a:google:chrome:35.0.1916.86:::::::*
cpe:2.3:a:google:chrome:35.0.1916.117:::::::*
cpe:2.3:a:google:chrome:35.0.1916.125:::::::*
cpe:2.3:a:google:chrome:35.0.1916.17:::::::*
cpe:2.3:a:google:chrome:35.0.1916.13:::::::*
cpe:2.3:a:google:chrome:35.0.1916.118:::::::*
cpe:2.3:a:google:chrome:35.0.1916.72:::::::*
cpe:2.3:a:google:chrome:35.0.1916.109:::::::*
cpe:2.3:a:google:chrome:35.0.1916.77:::::::*
cpe:2.3:a:google:chrome:35.0.1916.88:::::::*
cpe:2.3:a:google:chrome:35.0.1916.59:::::::*
cpe:2.3:a:google:chrome:35.0.1916.44:::::::*
cpe:2.3:a:google:chrome:35.0.1916.108:::::::*
cpe:2.3:a:google:chrome:35.0.1916.74:::::::*
cpe:2.3:a:google:chrome:35.0.1916.140:::::::*
cpe:2.3:a:google:chrome:35.0.1916.45:::::::*
cpe:2.3:a:google:chrome:35.0.1916.137:::::::*
cpe:2.3:a:google:chrome:35.0.1916.18:::::::*
cpe:2.3:a:google:chrome:35.0.1916.151:::::::*
cpe:2.3:a:google:chrome:35.0.1916.107:::::::*
cpe:2.3:a:google:chrome:35.0.1916.21:::::::*
cpe:2.3:a:google:chrome:35.0.1916.6:::::::*
cpe:2.3:a:google:chrome:35.0.1916.71:::::::*
cpe:2.3:a:google:chrome:35.0.1916.41:::::::*
cpe:2.3:a:google:chrome:35.0.1916.8:::::::*
cpe:2.3:a:google:chrome:35.0.1916.4:::::::*
cpe:2.3:a:google:chrome:35.0.1916.127:::::::*
cpe:2.3:a:google:chrome:35.0.1916.19:::::::*
cpe:2.3:a:google:chrome:35.0.1916.0:::::::*
cpe:2.3:a:google:chrome:35.0.1916.40:::::::*
cpe:2.3:a:google:chrome:35.0.1916.149:::::::*
cpe:2.3:a:google:chrome:35.0.1916.101:::::::*
cpe:2.3:a:google:chrome:35.0.1916.32:::::::*
cpe:2.3:a:google:chrome:35.0.1916.51:::::::*
cpe:2.3:a:google:chrome::::::::		35.0.1916.152
cpe:2.3:a:google:chrome:35.0.1916.115:::::::*
cpe:2.3:a:google:chrome:35.0.1916.142:::::::*
cpe:2.3:a:google:chrome:35.0.1916.116:::::::*
cpe:2.3:a:google:chrome:35.0.1916.80:::::::*
cpe:2.3:a:google:chrome:35.0.1916.39:::::::*
cpe:2.3:a:google:chrome:35.0.1916.43:::::::*
cpe:2.3:a:google:chrome:35.0.1916.121:::::::*
cpe:2.3:a:google:chrome:35.0.1916.93:::::::*
cpe:2.3:a:google:chrome:35.0.1916.113:::::::*
cpe:2.3:a:google:chrome:35.0.1916.34:::::::*
cpe:2.3:a:google:chrome:35.0.1916.37:::::::*
cpe:2.3:a:google:chrome:35.0.1916.103:::::::*
cpe:2.3:a:google:chrome:35.0.1916.123:::::::*
cpe:2.3:a:google:chrome:35.0.1916.90:::::::*
cpe:2.3:a:google:chrome:35.0.1916.68:::::::*
cpe:2.3:a:google:chrome:35.0.1916.141:::::::*
cpe:2.3:a:google:chrome:35.0.1916.1:::::::*
cpe:2.3:a:google:chrome:35.0.1916.112:::::::*
cpe:2.3:a:google:chrome:35.0.1916.27:::::::*
cpe:2.3:a:google:chrome:35.0.1916.7:::::::*
cpe:2.3:a:google:chrome:35.0.1916.126:::::::*
cpe:2.3:a:google:chrome:35.0.1916.120:::::::*
cpe:2.3:a:google:chrome:35.0.1916.84:::::::*
cpe:2.3:a:google:chrome:35.0.1916.138:::::::*
cpe:2.3:a:google:chrome:35.0.1916.46:::::::*
cpe:2.3:a:google:chrome:35.0.1916.104:::::::*
cpe:2.3:a:google:chrome:35.0.1916.22:::::::*
cpe:2.3:a:google:chrome:35.0.1916.150:::::::*
cpe:2.3:a:google:chrome:35.0.1916.69:::::::*
cpe:2.3:a:google:chrome:35.0.1916.15:::::::*
cpe:2.3:a:google:chrome:35.0.1916.31:::::::*
cpe:2.3:a:google:chrome:35.0.1916.96:::::::*
cpe:2.3:a:google:chrome:35.0.1916.14:::::::*
cpe:2.3:a:google:chrome:35.0.1916.56:::::::*
cpe:2.3:a:google:chrome:35.0.1916.2:::::::*
cpe:2.3:a:google:chrome:35.0.1916.48:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html
2	http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html
3	http://secunia.com/advisories/58585
4	http://secunia.com/advisories/58585
5	http://secunia.com/advisories/59090
6	http://secunia.com/advisories/59090
7	http://secunia.com/advisories/60061
8	http://secunia.com/advisories/60061
9	http://secunia.com/advisories/60372
10	http://secunia.com/advisories/60372
11	http://security.gentoo.org/glsa/glsa-201408-16.xml
12	http://security.gentoo.org/glsa/glsa-201408-16.xml
13	http://www.debian.org/security/2014/dsa-2959
14	http://www.debian.org/security/2014/dsa-2959
15	http://www.securityfocus.com/bid/67972
16	http://www.securityfocus.com/bid/67972
17	https://code.google.com/p/chromium/issues/detail?id=368980
18	https://code.google.com/p/chromium/issues/detail?id=368980
19	https://src.chromium.org/viewvc/chrome?revision=268831&view=revision
20	https://src.chromium.org/viewvc/chrome?revision=268831&view=revision

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:35.0.1916.114:::::::*
cpe:2.3:a:google:chrome:35.0.1916.99:::::::*
cpe:2.3:a:google:chrome:35.0.1916.57:::::::*
cpe:2.3:a:google:chrome:35.0.1916.122:::::::*
cpe:2.3:a:google:chrome:35.0.1916.3:::::::*
cpe:2.3:a:google:chrome:35.0.1916.38:::::::*
cpe:2.3:a:google:chrome:35.0.1916.105:::::::*
cpe:2.3:a:google:chrome:35.0.1916.128:::::::*
cpe:2.3:a:google:chrome:35.0.1916.95:::::::*
cpe:2.3:a:google:chrome:35.0.1916.52:::::::*
cpe:2.3:a:google:chrome:35.0.1916.82:::::::*
cpe:2.3:a:google:chrome:35.0.1916.42:::::::*
cpe:2.3:a:google:chrome:35.0.1916.36:::::::*
cpe:2.3:a:google:chrome:35.0.1916.111:::::::*
cpe:2.3:a:google:chrome:35.0.1916.124:::::::*
cpe:2.3:a:google:chrome:35.0.1916.61:::::::*
cpe:2.3:a:google:chrome:35.0.1916.98:::::::*
cpe:2.3:a:google:chrome:35.0.1916.47:::::::*
cpe:2.3:a:google:chrome:35.0.1916.110:::::::*
cpe:2.3:a:google:chrome:35.0.1916.10:::::::*
cpe:2.3:a:google:chrome:35.0.1916.20:::::::*
cpe:2.3:a:google:chrome:35.0.1916.85:::::::*
cpe:2.3:a:google:chrome:35.0.1916.9:::::::*
cpe:2.3:a:google:chrome:35.0.1916.92:::::::*
cpe:2.3:a:google:chrome:35.0.1916.119:::::::*
cpe:2.3:a:google:chrome:35.0.1916.23:::::::*
cpe:2.3:a:google:chrome:35.0.1916.49:::::::*
cpe:2.3:a:google:chrome:35.0.1916.54:::::::*
cpe:2.3:a:google:chrome:35.0.1916.106:::::::*
cpe:2.3:a:google:chrome:35.0.1916.35:::::::*
cpe:2.3:a:google:chrome:35.0.1916.33:::::::*
cpe:2.3:a:google:chrome:35.0.1916.5:::::::*
cpe:2.3:a:google:chrome:35.0.1916.11:::::::*
cpe:2.3:a:google:chrome:35.0.1916.86:::::::*
cpe:2.3:a:google:chrome:35.0.1916.117:::::::*
cpe:2.3:a:google:chrome:35.0.1916.125:::::::*
cpe:2.3:a:google:chrome:35.0.1916.17:::::::*
cpe:2.3:a:google:chrome:35.0.1916.13:::::::*
cpe:2.3:a:google:chrome:35.0.1916.118:::::::*
cpe:2.3:a:google:chrome:35.0.1916.72:::::::*
cpe:2.3:a:google:chrome:35.0.1916.109:::::::*
cpe:2.3:a:google:chrome:35.0.1916.77:::::::*
cpe:2.3:a:google:chrome:35.0.1916.88:::::::*
cpe:2.3:a:google:chrome:35.0.1916.59:::::::*
cpe:2.3:a:google:chrome:35.0.1916.44:::::::*
cpe:2.3:a:google:chrome:35.0.1916.108:::::::*
cpe:2.3:a:google:chrome:35.0.1916.74:::::::*
cpe:2.3:a:google:chrome:35.0.1916.140:::::::*
cpe:2.3:a:google:chrome:35.0.1916.45:::::::*
cpe:2.3:a:google:chrome:35.0.1916.137:::::::*
cpe:2.3:a:google:chrome:35.0.1916.18:::::::*
cpe:2.3:a:google:chrome:35.0.1916.151:::::::*
cpe:2.3:a:google:chrome:35.0.1916.107:::::::*
cpe:2.3:a:google:chrome:35.0.1916.21:::::::*
cpe:2.3:a:google:chrome:35.0.1916.6:::::::*
cpe:2.3:a:google:chrome:35.0.1916.71:::::::*
cpe:2.3:a:google:chrome:35.0.1916.41:::::::*
cpe:2.3:a:google:chrome:35.0.1916.8:::::::*
cpe:2.3:a:google:chrome:35.0.1916.4:::::::*
cpe:2.3:a:google:chrome:35.0.1916.127:::::::*
cpe:2.3:a:google:chrome:35.0.1916.19:::::::*
cpe:2.3:a:google:chrome:35.0.1916.0:::::::*
cpe:2.3:a:google:chrome:35.0.1916.40:::::::*
cpe:2.3:a:google:chrome:35.0.1916.149:::::::*
cpe:2.3:a:google:chrome:35.0.1916.101:::::::*
cpe:2.3:a:google:chrome:35.0.1916.32:::::::*
cpe:2.3:a:google:chrome:35.0.1916.51:::::::*
cpe:2.3:a:google:chrome::::::::		35.0.1916.152
cpe:2.3:a:google:chrome:35.0.1916.115:::::::*
cpe:2.3:a:google:chrome:35.0.1916.142:::::::*
cpe:2.3:a:google:chrome:35.0.1916.116:::::::*
cpe:2.3:a:google:chrome:35.0.1916.80:::::::*
cpe:2.3:a:google:chrome:35.0.1916.39:::::::*
cpe:2.3:a:google:chrome:35.0.1916.43:::::::*
cpe:2.3:a:google:chrome:35.0.1916.121:::::::*
cpe:2.3:a:google:chrome:35.0.1916.93:::::::*
cpe:2.3:a:google:chrome:35.0.1916.113:::::::*
cpe:2.3:a:google:chrome:35.0.1916.34:::::::*
cpe:2.3:a:google:chrome:35.0.1916.37:::::::*
cpe:2.3:a:google:chrome:35.0.1916.103:::::::*
cpe:2.3:a:google:chrome:35.0.1916.123:::::::*
cpe:2.3:a:google:chrome:35.0.1916.90:::::::*
cpe:2.3:a:google:chrome:35.0.1916.68:::::::*
cpe:2.3:a:google:chrome:35.0.1916.141:::::::*
cpe:2.3:a:google:chrome:35.0.1916.1:::::::*
cpe:2.3:a:google:chrome:35.0.1916.112:::::::*
cpe:2.3:a:google:chrome:35.0.1916.27:::::::*
cpe:2.3:a:google:chrome:35.0.1916.7:::::::*
cpe:2.3:a:google:chrome:35.0.1916.126:::::::*
cpe:2.3:a:google:chrome:35.0.1916.120:::::::*
cpe:2.3:a:google:chrome:35.0.1916.84:::::::*
cpe:2.3:a:google:chrome:35.0.1916.138:::::::*
cpe:2.3:a:google:chrome:35.0.1916.46:::::::*
cpe:2.3:a:google:chrome:35.0.1916.104:::::::*
cpe:2.3:a:google:chrome:35.0.1916.22:::::::*
cpe:2.3:a:google:chrome:35.0.1916.150:::::::*
cpe:2.3:a:google:chrome:35.0.1916.69:::::::*
cpe:2.3:a:google:chrome:35.0.1916.15:::::::*
cpe:2.3:a:google:chrome:35.0.1916.31:::::::*
cpe:2.3:a:google:chrome:35.0.1916.96:::::::*
cpe:2.3:a:google:chrome:35.0.1916.14:::::::*
cpe:2.3:a:google:chrome:35.0.1916.56:::::::*
cpe:2.3:a:google:chrome:35.0.1916.2:::::::*
cpe:2.3:a:google:chrome:35.0.1916.48:::::::*