Lucene search

K
cvelistChromeCVELIST:CVE-2014-3170
HistoryAug 27, 2014 - 1:00 a.m.

CVE-2014-3170

2014-08-2701:00:00
Chrome
www.cve.org
23

AI Score

5.8

Confidence

Low

EPSS

0.005

Percentile

77.1%

extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a ‘\0’ character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.

AI Score

5.8

Confidence

Low

EPSS

0.005

Percentile

77.1%