Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3197
HistoryOct 08, 2014 - 12:00 a.m.

CVE-2014-3197

2014-10-0800:00:00
ubuntu.com
ubuntu.com
6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.4%

The NavigationScheduler::schedulePageBlock function in
core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome
before 38.0.2125.101, does not properly provide substitute data for pages
blocked by the XSS auditor, which allows remote attackers to obtain
sensitive information via a crafted web site.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchoxide-qt< 1.2.5-0ubuntu0.14.04.1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.4%