Lucene search
ChromeCVELIST:CVE-2014-3160HistoryJul 20, 2014 - 10:00 a.m.
CVE-2014-3160
2014-07-2010:00:00
Chrome
www.cve.org
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
References
googlechromereleases.blogspot.com/2014/07/stable-channel-update.html
secunia.com/advisories/60061
secunia.com/advisories/60372
security.gentoo.org/glsa/glsa-201408-16.xml
www.debian.org/security/2014/dsa-3039
www.securityfocus.com/bid/68677
code.google.com/p/chromium/issues/detail?id=380885
src.chromium.org/viewvc/blink?revision=176084&view=revision
Related
ubuntucve
ubuntucve
CVE-2014-3160
2014-07-20 00:00:00
cve
cve
CVE-2014-3160
2014-07-20 11:12:50
nvd
nvd
CVE-2014-3160
2014-07-20 11:12:50
debiancve
debiancve
CVE-2014-3160
2014-07-20 11:12:00
prion
prion
Design/Logic Flaw
2014-07-20 11:12:00
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (3718833e-0d27-11e4-89db-000c6e25e3e9)
2014-07-18 00:00:00
Google Chrome < 36.0.1985.125 Multiple Vulnerabilities (Mac OS X)
2014-07-17 00:00:00
Google Chrome < 36.0.1985.125 Multiple Vulnerabilities
2014-07-17 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Mac OS X
2014-08-01 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Windows
2014-08-01 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Linux
2014-08-01 00:00:00
chrome
chrome
Stable Channel Update
2014-07-16 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-07-16 00:00:00
suse
suse
chromium: update to 36.0.1985.125 (important)
2014-08-11 10:09:58
securityvulns
securityvulns
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-10-05 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2014-10-05 00:00:00
osv
osv
chromium-browser - security update
2014-09-28 00:00:00
debian
debian
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 18:48:40
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 18:48:40
ubuntu
ubuntu
Oxide vulnerabilities
2014-07-23 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-08-30 00:00:00