Description
core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | chromium-browser | 34.0.1847.132-1~deb7u1 | DSA-2920-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | chromium-browser | 36.0.1985.125-0ubuntu1.14.04.0~pkg1029 | — |
| Ubuntu 14.04 LTS | oxide-qt | 1.0.4-0ubuntu0.14.04.1 | USN-2298-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 | openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1 |
Advisories 4
- DSA-2920-1 chromium-browser - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2298-1 oxide-qt vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- openSUSE-SU-2024:10171-1 chromedriver-55.0.2883.75-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12948-1 ungoogled-chromium-113.0.5672.92-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 58301 third-party-advisory
- http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html
- openSUSE-SU-2014:0669 vendor-advisory
- https://support.apple.com/kb/HT6537
- https://src.chromium.org/viewvc/blink?revision=171216&view=revision
- APPLE-SA-2014-06-30-4 vendor-advisory
- GLSA-201408-16 vendor-advisory
- 60372 third-party-advisory
- http://support.apple.com/kb/HT6254
- openSUSE-SU-2014:0668 vendor-advisory
- DSA-2920 vendor-advisory
- APPLE-SA-2014-06-30-3 vendor-advisory
- https://code.google.com/p/chromium/issues/detail?id=349903
- APPLE-SA-2014-05-21-1 vendor-advisory
- 67572 vdb-entry