Lucene search

PRIOn knowledge basePRION:CVE-2014-7899

HistoryNov 19, 2014 - 11:59 a.m.

Design/Logic Flaw

2014-11-1911:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.

CPENameOperatorVersion
chromele38.0.2125.7

CPE	Name	Operator	Version
	chrome	le	38.0.2125.7

References

rhn.redhat.com/errata/RHSA-2014-1894.html

secunia.com/advisories/60194

www.securityfocus.com/bid/71160

www.securitytracker.com/id/1031241

code.google.com/p/chromium/issues/detail?id=389734

exchange.xforce.ibmcloud.com/vulnerabilities/98787

googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html

src.chromium.org/viewvc/chrome?revision=279232&view=revision