Code injection

2014-08-2701:55:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.063 Low

EPSS

Percentile

93.4%

JSON

Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.

CPENameOperatorVersion
chromeeq37.0.2062.49
chromeeq37.0.2062.60
chromeeq37.0.2062.44
chromeeq37.0.2062.31
chromeeq37.0.2062.11
chromeeq37.0.2062.51
chromeeq37.0.2062.76
chromeeq37.0.2062.28
chromeeq37.0.2062.48
chromeeq37.0.2062.78

Name	Operator	Version
chrome	eq	37.0.2062.49
chrome	eq	37.0.2062.60
chrome	eq	37.0.2062.44
chrome	eq	37.0.2062.31
chrome	eq	37.0.2062.11
chrome	eq	37.0.2062.51
chrome	eq	37.0.2062.76
chrome	eq	37.0.2062.28
chrome	eq	37.0.2062.48
chrome	eq	37.0.2062.78