UBUNTU-CVE-2014-1731

Advisory lineage Upstream: 1 Downstream: 1
Upstream
Downstream
Published: 26 Apr 2014, 00:00
Last modified:04 Feb 2026, 02:17

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Apr 2014, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 02:17
Last Modified
Vulnerability information updated

Description

core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.

Affected Systems

  • ubuntuchromium-browser

    < 36.0.1985.125-0ubuntu1.14.04.0~pkg1029

  • ubuntuoxide-qt

    < 1.0.4-0ubuntu0.14.04.1

References (6)