CVE-2014-3174
modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.
| Software | From | Fixed in |
|---|---|---|
| google / chrome | 37.0.2062.49 | 37.0.2062.49.x |
| google / chrome | 37.0.2062.60 | 37.0.2062.60.x |
| google / chrome | 37.0.2062.44 | 37.0.2062.44.x |
| google / chrome | 37.0.2062.31 | 37.0.2062.31.x |
| google / chrome | 37.0.2062.11 | 37.0.2062.11.x |
| google / chrome | 37.0.2062.51 | 37.0.2062.51.x |
| google / chrome | 37.0.2062.76 | 37.0.2062.76.x |
| google / chrome | 37.0.2062.28 | 37.0.2062.28.x |
| google / chrome | 37.0.2062.48 | 37.0.2062.48.x |
| google / chrome | 37.0.2062.78 | 37.0.2062.78.x |
| google / chrome | 37.0.2062.14 | 37.0.2062.14.x |
| google / chrome | 37.0.2062.16 | 37.0.2062.16.x |
| google / chrome | 37.0.2062.35 | 37.0.2062.35.x |
| google / chrome | 37.0.2062.69 | 37.0.2062.69.x |
| google / chrome | 37.0.2062.25 | 37.0.2062.25.x |
| google / chrome | 37.0.2062.4 | 37.0.2062.4.x |
| google / chrome | 37.0.2062.36 | 37.0.2062.36.x |
| google / chrome | 37.0.2062.59 | 37.0.2062.59.x |
| google / chrome | 37.0.2062.81 | 37.0.2062.81.x |
| google / chrome | 37.0.2062.73 | 37.0.2062.73.x |
| google / chrome | 37.0.2062.67 | 37.0.2062.67.x |
| google / chrome | 37.0.2062.77 | 37.0.2062.77.x |
| google / chrome | 37.0.2062.9 | 37.0.2062.9.x |
| google / chrome | 37.0.2062.3 | 37.0.2062.3.x |
| google / chrome | 37.0.2062.5 | 37.0.2062.5.x |
| google / chrome | 37.0.2062.33 | 37.0.2062.33.x |
| google / chrome | 37.0.2062.29 | 37.0.2062.29.x |
| google / chrome | 37.0.2062.0 | 37.0.2062.0.x |
| google / chrome | 37.0.2062.19 | 37.0.2062.19.x |
| google / chrome | 37.0.2062.10 | 37.0.2062.10.x |
| google / chrome | 37.0.2062.23 | 37.0.2062.23.x |
| google / chrome | 37.0.2062.54 | 37.0.2062.54.x |
| google / chrome | 37.0.2062.22 | 37.0.2062.22.x |
| google / chrome | 37.0.2062.17 | 37.0.2062.17.x |
| google / chrome | 37.0.2062.46 | 37.0.2062.46.x |
| google / chrome | 37.0.2062.61 | 37.0.2062.61.x |
| google / chrome | 37.0.2062.58 | 37.0.2062.58.x |
| google / chrome | 37.0.2062.64 | 37.0.2062.64.x |
| google / chrome | 37.0.2062.8 | 37.0.2062.8.x |
| google / chrome | 37.0.2062.30 | 37.0.2062.30.x |
| google / chrome | 37.0.2062.7 | 37.0.2062.7.x |
| google / chrome | 37.0.2062.57 | 37.0.2062.57.x |
| google / chrome | 37.0.2062.68 | 37.0.2062.68.x |
| google / chrome | 37.0.2062.62 | 37.0.2062.62.x |
| google / chrome | 37.0.2062.70 | 37.0.2062.70.x |
| google / chrome | 37.0.2062.2 | 37.0.2062.2.x |
| google / chrome | 37.0.2062.20 | 37.0.2062.20.x |
| google / chrome | 37.0.2062.63 | 37.0.2062.63.x |
| google / chrome | 37.0.2062.50 | 37.0.2062.50.x |
| google / chrome | 37.0.2062.52 | 37.0.2062.52.x |
| google / chrome | 37.0.2062.75 | 37.0.2062.75.x |
| google / chrome | 37.0.2062.53 | 37.0.2062.53.x |
| google / chrome | 37.0.2062.26 | 37.0.2062.26.x |
| google / chrome | 37.0.2062.72 | 37.0.2062.72.x |
| google / chrome | 37.0.2062.15 | 37.0.2062.15.x |
| google / chrome | 37.0.2062.92 | 37.0.2062.92.x |
| google / chrome | 37.0.2062.56 | 37.0.2062.56.x |
| google / chrome | 37.0.2062.43 | 37.0.2062.43.x |
| google / chrome | 37.0.2062.6 | 37.0.2062.6.x |
| google / chrome | 37.0.2062.37 | 37.0.2062.37.x |
| google / chrome | 37.0.2062.71 | 37.0.2062.71.x |
| google / chrome | 37.0.2062.90 | 37.0.2062.90.x |
| google / chrome | 37.0.2062.18 | 37.0.2062.18.x |
| google / chrome | 37.0.2062.39 | 37.0.2062.39.x |
| google / chrome | 37.0.2062.24 | 37.0.2062.24.x |
| google / chrome | 37.0.2062.32 | 37.0.2062.32.x |
| google / chrome | - | 37.0.2062.93.x |
| google / chrome | 37.0.2062.80 | 37.0.2062.80.x |
| google / chrome | 37.0.2062.47 | 37.0.2062.47.x |
| google / chrome | 37.0.2062.45 | 37.0.2062.45.x |
| google / chrome | 37.0.2062.55 | 37.0.2062.55.x |
| google / chrome | 37.0.2062.12 | 37.0.2062.12.x |
| google / chrome | 37.0.2062.89 | 37.0.2062.89.x |
| google / chrome | 37.0.2062.66 | 37.0.2062.66.x |
| google / chrome | 37.0.2062.34 | 37.0.2062.34.x |
| google / chrome | 37.0.2062.13 | 37.0.2062.13.x |
| google / chrome | 37.0.2062.21 | 37.0.2062.21.x |
| google / chrome | 37.0.2062.74 | 37.0.2062.74.x |
| google / chrome | 37.0.2062.91 | 37.0.2062.91.x |
| google / chrome | 37.0.2062.27 | 37.0.2062.27.x |
| google / chrome | 37.0.2062.65 | 37.0.2062.65.x |
| google / chrome | 37.0.2062.1 | 37.0.2062.1.x |
- http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html
- http://secunia.com/advisories/60268
- http://secunia.com/advisories/60424
- http://secunia.com/advisories/61482
- http://security.gentoo.org/glsa/glsa-201408-16.xml
- http://www.debian.org/security/2014/dsa-3039
- http://www.securityfocus.com/bid/69407
- http://www.securitytracker.com/id/1030767
- https://crbug.com/389219
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95474
- https://src.chromium.org/viewvc/blink?revision=177250&view=revision
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime