Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3160HistoryJul 20, 2014 - 11:12 a.m.
CVE-2014-3160
2014-07-2011:12:00
Debian Security Bug Tracker
security-tracker.debian.org
9
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | chromium-browser | < 70.0.3538.110-1~deb9u1 | chromium-browser_70.0.3538.110-1~deb9u1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2014-3160
2014-07-20 00:00:00
cve
cve
CVE-2014-3160
2014-07-20 11:12:00
prion
prion
Design/Logic Flaw
2014-07-20 11:12:00
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (3718833e-0d27-11e4-89db-000c6e25e3e9)
2014-07-18 00:00:00
Google Chrome < 36.0.1985.125 Multiple Vulnerabilities
2014-07-17 00:00:00
Google Chrome < 36.0.1985.125 Multiple Vulnerabilities (Mac OS X)
2014-07-17 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Mac OS X
2014-08-01 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Windows
2014-08-01 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Jul 2014) - Linux
2014-08-01 00:00:00
chrome
chrome
Stable Channel Update
2014-07-16 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-07-16 00:00:00
suse
suse
chromium: update to 36.0.1985.125 (important)
2014-08-11 10:09:58
debian
debian
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 18:48:40
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-09-28 18:48:40
ubuntu
ubuntu
Oxide vulnerabilities
2014-07-23 00:00:00
securityvulns
securityvulns
Google Chrome / Chromium multiple security vulnerabilities
2014-10-05 00:00:00
[SECURITY] [DSA 3039-1] chromium-browser security update
2014-10-05 00:00:00
osv
osv
chromium-browser - security update
2014-09-28 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-08-30 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related for DEBIANCVE:CVE-2014-3160