Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3188
HistoryOct 08, 2014 - 12:00 a.m.

CVE-2014-3188

2014-10-0800:00:00
ubuntu.com
ubuntu.com
17

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.03

Percentile

90.9%

JSON

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do
not properly handle the interaction of IPC and Google V8, which allows
remote attackers to execute arbitrary code via vectors involving JSON data,
related to improper parsing of an escaped index by ParseJsonObject in
json-parser.h.

Notes

Author Note
seth-arnold I didn’t find a json-parser.h or ParseJsonObject via codesearch
mikesalvatore The Ubuntu Security Team does not support libv8
OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu18.04noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu18.10noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu14.04noarchchromium-browser< 38.0.2125.111-0ubuntu0.14.04.1.1061UNKNOWN
ubuntu14.10noarchchromium-browser< 38.0.2125.111-0ubuntu0.14.10.1.1103UNKNOWN
ubuntu15.04noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu15.10noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu16.04noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu16.10noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
ubuntu17.04noarchchromium-browser< 38.0.2125.111-0ubuntu1.1103UNKNOWN
Rows per page:
1-10 of 181

Related

cve 1
cvelist 1
nvd 1
debiancve 1
prion 1
chrome 2
nessus 9
redhat 1
mageia 1
openvas 6
ubuntu 1
threatpost 1
freebsd 1
gentoo 1
osv 2
cve
cve
CVE-2014-3188
2014-10-08 10:55:06
cvelist
cvelist
CVE-2014-3188
2014-10-08 10:00:00
nvd
nvd
CVE-2014-3188
2014-10-08 10:55:06
debiancve
debiancve
CVE-2014-3188
2014-10-08 10:55:00
prion
prion
Design/Logic Flaw
2014-10-08 10:55:00
chrome
chrome
Stable Channel Update for Chrome OS
2014-10-07 00:00:00
Stable Channel Update
2014-10-07 00:00:00
nessus
nessus
RHEL 6 : v8 (Unpatched Vulnerability)
2024-06-03 00:00:00
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2345-1)
2014-10-15 00:00:00
RHEL 6 : chromium-browser (RHSA-2014:1626)
2014-10-14 00:00:00
redhat
redhat
(RHSA-2014:1626) Critical: chromium-browser security update
2014-10-14 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2014-10-28 14:33:36
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0428)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2345-1)
2014-10-15 00:00:00
Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Mac OS X
2014-10-16 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2014-10-14 00:00:00
threatpost
threatpost
Google Fixes 159 Flaws in Chrome
2014-10-09 07:02:08
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-10-07 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2014-12-13 00:00:00
osv
osv
chromedriver-55.0.2883.75-3.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.03

Percentile

90.9%

JSON
Related for UB:CVE-2014-3188
cve1cvelist1nvd1debiancve1prion1chrome2nessus9redhat1mageia1openvas6ubuntu1threatpost1freebsd1gentoo1osv2