CVE-2014-3187

Опубликовано: 08 окт. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 37.0.2062.59 (включая)

cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:38.0.2125.7:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00478

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2014-3187

debian

больше 11 лет назад

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS ...

GHSA-p4w4-693c-5mf2

github

больше 3 лет назад