Lucene search
HistoryOct 08, 2014 - 10:55 a.m.
CVE-2014-3188
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.7
Confidence
High
EPSS
0.03
Percentile
90.9%
Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
Affected configurations
Node
googlechrome_osRange≤38.0.2125.77
Node
googlechromeRange≤38.0.2125.7
Node
redhatenterprise_linux_desktop_supplementaryMatch6.0
ORredhatenterprise_linux_server_supplementaryMatch6.0
ORredhatenterprise_linux_server_supplementary_eusMatch6.6.z
ORredhatenterprise_linux_workstation_supplementaryMatch6.0
Related
cve
cve
CVE-2014-3188
2014-10-08 10:55:06
debiancve
debiancve
CVE-2014-3188
2014-10-08 10:55:00
cvelist
cvelist
CVE-2014-3188
2014-10-08 10:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2014-10-07 00:00:00
Stable Channel Update
2014-10-07 00:00:00
prion
prion
Design/Logic Flaw
2014-10-08 10:55:00
ubuntucve
ubuntucve
CVE-2014-3188
2014-10-08 00:00:00
nessus
nessus
RHEL 6 : v8 (Unpatched Vulnerability)
2024-06-03 00:00:00
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2345-1)
2014-10-15 00:00:00
RHEL 6 : chromium-browser (RHSA-2014:1626)
2014-10-14 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2014-10-14 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0428)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2345-1)
2014-10-15 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Linux
2014-10-16 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2014-10-28 14:33:36
threatpost
threatpost
Google Fixes 159 Flaws in Chrome
2014-10-09 07:02:08
redhat
redhat
(RHSA-2014:1626) Critical: chromium-browser security update
2014-10-14 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-10-07 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-12-13 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.7
Confidence
High
EPSS
0.03
Percentile
90.9%
Related for NVD:CVE-2014-3188