Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3201

Опубликовано: 10 окт. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:android:*:*
Версия до 38.0.2125.101 (включая)

EPSS

Процентиль: 52%
0.0077
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 12 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

debian
почти 12 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used ...

github
около 4 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

EPSS

Процентиль: 52%
0.0077
Низкий

5 Medium

CVSS2

Дефекты

CWE-119