The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome_os | * | 33.0.1750.149 (including) | |
| Chrome_os | 33.0.1750.2 (including) | 33.0.1750.2 (including) | |
| Chrome_os | 33.0.1750.5 (including) | 33.0.1750.5 (including) | |
| Chrome_os | 33.0.1750.16 (including) | 33.0.1750.16 (including) | |
| Chrome_os | 33.0.1750.29 (including) | 33.0.1750.29 (including) | |
| Chrome_os | 33.0.1750.51 (including) | 33.0.1750.51 (including) | |
| Chrome_os | 33.0.1750.58 (including) | 33.0.1750.58 (including) | |
| Chrome_os | 33.0.1750.70 (including) | 33.0.1750.70 (including) | |
| Chrome_os | 33.0.1750.93 (including) | 33.0.1750.93 (including) | |
| Chrome_os | 33.0.1750.112 (including) | 33.0.1750.112 (including) | |
| Chrome_os | 33.0.1750.124 (including) | 33.0.1750.124 (including) |
References
- http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
- https://code.google.com/p/chromium/issues/detail?id=344051
- http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
- https://code.google.com/p/chromium/issues/detail?id=344051