Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3201

Опубликовано: 10 окт. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:android:*:*
Версия до 38.0.2125.101 (включая)

EPSS

Процентиль: 44%
0.00217
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 11 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

debian
больше 11 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used ...

github
больше 3 лет назад

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

EPSS

Процентиль: 44%
0.00217
Низкий

5 Medium

CVSS2

Дефекты

CWE-119