Back to Database
Status published
Critical
CVE-2014-3175
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers...
Vulnerability Description
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3175
Credits & Attribution
No credits recorded in the NVD database.
References
- https://code.google.com/p/chromium/issues/detail?id=389216
- https://code.google.com/p/chromium/issues/detail?id=389280
- https://code.google.com/p/chromium/issues/detail?id=382242
- https://code.google.com/p/chromium/issues/detail?id=393938
- https://code.google.com/p/chromium/issues/detail?id=357452
- https://code.google.com/p/chromium/issues/detail?id=382243
- http://www.securityfocus.com/bid/69402
- https://code.google.com/p/chromium/issues/detail?id=379656
- https://code.google.com/p/chromium/issues/detail?id=382240
- https://code.google.com/p/chromium/issues/detail?id=387371
- https://code.google.com/p/chromium/issues/detail?id=389570
- https://code.google.com/p/chromium/issues/detail?id=382639
- https://code.google.com/p/chromium/issues/detail?id=396255
- https://code.google.com/p/chromium/issues/detail?id=364062
- http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=382656
- https://code.google.com/p/chromium/issues/detail?id=384662
- https://code.google.com/p/chromium/issues/detail?id=381244
- https://code.google.com/p/chromium/issues/detail?id=390176
- http://secunia.com/advisories/60424
- https://code.google.com/p/chromium/issues/detail?id=372410
- https://code.google.com/p/chromium/issues/detail?id=368978
- https://code.google.com/p/chromium/issues/detail?id=372413
- http://security.gentoo.org/glsa/glsa-201408-16.xml
- https://code.google.com/p/chromium/issues/detail?id=390304
- https://code.google.com/p/chromium/issues/detail?id=389285
- https://code.google.com/p/chromium/issues/detail?id=382601
- https://code.google.com/p/chromium/issues/detail?id=366687
- https://code.google.com/p/chromium/issues/detail?id=383703
- https://code.google.com/p/chromium/issues/detail?id=350782
- https://code.google.com/p/chromium/issues/detail?id=381031
- https://code.google.com/p/chromium/issues/detail?id=382606
- https://code.google.com/p/chromium/issues/detail?id=367991
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html
- https://code.google.com/p/chromium/issues/detail?id=381521
- https://code.google.com/p/chromium/issues/detail?id=389316
- https://crbug.com/406143
- https://code.google.com/p/chromium/issues/detail?id=149871
- https://code.google.com/p/chromium/issues/detail?id=388771
- http://secunia.com/advisories/60268
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95475
- https://code.google.com/p/chromium/issues/detail?id=382820
- http://www.securitytracker.com/id/1030767
- https://code.google.com/p/chromium/issues/detail?id=387315
- https://code.google.com/p/chromium/issues/detail?id=387016
- http://www.debian.org/security/2014/dsa-3039
- https://code.google.com/p/chromium/issues/detail?id=394026
- https://code.google.com/p/chromium/issues/detail?id=382241
- https://code.google.com/p/chromium/issues/detail?id=395972
- https://code.google.com/p/chromium/issues/detail?id=337572
- https://code.google.com/p/chromium/issues/detail?id=397258
More from google
View All →CVE-2025-24959
Environment Variable Injection for dotenv API in zx
Low
1
CVE-2024-45601
Local file Inclusion via static file serving functionality in Mesop
High
7.5
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
Critical
9.6
CVE-2022-31055
Improper Access Control in kctf
High
7.5
CVE-2022-23569
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Medium
6.5
Affected Vendor
Affected Software
chrome
Vulnerable Versions:
0, 37.0.2062.0, 37.0.2062.1, 37.0.2062.2, 37.0.2062.3, 37.0.2062.4, 37.0.2062.5, 37.0.2062.6, 37.0.2062.7, 37.0.2062.8, 37.0.2062.9, 37.0.2062.10, 37.0.2062.11, 37.0.2062.12, 37.0.2062.13, 37.0.2062.14, 37.0.2062.15, 37.0.2062.16, 37.0.2062.17, 37.0.2062.18, 37.0.2062.19, 37.0.2062.20, 37.0.2062.21, 37.0.2062.22, 37.0.2062.23, 37.0.2062.24, 37.0.2062.25, 37.0.2062.26, 37.0.2062.27, 37.0.2062.28, 37.0.2062.29, 37.0.2062.30, 37.0.2062.31, 37.0.2062.32, 37.0.2062.33, 37.0.2062.34, 37.0.2062.35, 37.0.2062.36, 37.0.2062.37, 37.0.2062.39, 37.0.2062.43, 37.0.2062.44, 37.0.2062.45, 37.0.2062.46, 37.0.2062.47, 37.0.2062.48, 37.0.2062.49, 37.0.2062.50, 37.0.2062.51, 37.0.2062.52, 37.0.2062.53, 37.0.2062.54, 37.0.2062.55, 37.0.2062.56, 37.0.2062.57, 37.0.2062.58, 37.0.2062.59, 37.0.2062.60, 37.0.2062.61, 37.0.2062.62, 37.0.2062.63, 37.0.2062.64, 37.0.2062.65, 37.0.2062.66, 37.0.2062.67, 37.0.2062.68, 37.0.2062.69, 37.0.2062.70, 37.0.2062.71, 37.0.2062.72, 37.0.2062.73, 37.0.2062.74, 37.0.2062.75, 37.0.2062.76, 37.0.2062.77, 37.0.2062.78, 37.0.2062.80, 37.0.2062.81, 37.0.2062.89, 37.0.2062.90, 37.0.2062.91, 37.0.2062.92
Timeline
Official Publish:
August 27th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.