CVE-2014-3201

2014-10-1001:00:00

Chrome

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.