CVE-2014-1731

Summary

CVE	CVE-2014-1731
State	PUBLISHED
Assigner	Chrome
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-04-26 10:55:05 UTC
Updated	2026-05-06 22:30:45 UTC
Description	core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.

Risk And Classification

Primary CVSS: v2.0 7.5 from [email protected]

AV:N/AC:L/Au:N/C:P/I:P/A:P

Problem Types: CWE-843 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Apple	Mac Os X	-	All	All	All
Application	Google	Chrome	All	All	All	All
Operating System	Microsoft	Windows	-	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
WebKit CVE-2014-1731 Unspecified Memory Corruption Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
NEOHAPSIS - Peace of Mind Through Integrity and Insight	af854a3a-2127-422b-91ae-364da2661108	archives.neohapsis.com
Issue 349903 - chromium - ASSERTION FAILED: !object \|\| (object->isListBox()), UNKNOWN in WebCore::HTMLSelectElement::listBoxDefaultEventHandler - An open-source project to help move the web forward. - Google Project Hosting	af854a3a-2127-422b-91ae-364da2661108	code.google.com
NEOHAPSIS - Peace of Mind Through Integrity and Insight	af854a3a-2127-422b-91ae-364da2661108	archives.neohapsis.com
Gentoo Linux Documentation -- Chromium: Multiple vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org
NEOHAPSIS - Peace of Mind Through Integrity and Insight	af854a3a-2127-422b-91ae-364da2661108	archives.neohapsis.com
Security Advisory SA58301 - Google Chrome Multiple Vulnerabilities - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
[blink] Revision 171216	af854a3a-2127-422b-91ae-364da2661108	src.chromium.org
Chrome Releases: Stable Channel Update	af854a3a-2127-422b-91ae-364da2661108	googlechromereleases.blogspot.com
Security Advisory SA60372 - Ubuntu update for oxide-qt - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
openSUSE-SU-2014:0668-1: moderate: update for chromium	af854a3a-2127-422b-91ae-364da2661108	lists.opensuse.org
openSUSE-SU-2014:0669-1: moderate: update for chromium	af854a3a-2127-422b-91ae-364da2661108	lists.opensuse.org
Debian -- Security Information -- DSA-2920-1 chromium-browser	af854a3a-2127-422b-91ae-364da2661108	www.debian.org
About the security content of iTunes 12.0.1 - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com
About the security content of Safari 6.1.4 and Safari 7.0.4 - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.