Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-3188

Опубликовано: 22 сент. 2014
Источник: redhat
CVSS2: 6.8

Описание

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
CloudForms Management Engine 5ruby193-v8Will not fix
OpenShift Enterprise 1ruby193-v8Will not fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)v8Will not fix
Red Hat OpenShift Enterprise 2v8Will not fix
Red Hat OpenStack Platform 4ruby193-v8Will not fix
Red Hat OpenStack Platform 4v8Will not fix
Red Hat Satellite 6v8Not affected
Red Hat Software Collectionsv8314-v8Will not fix
Red Hat Subscription Asset Managerruby193-v8Will not fix
Red Hat Subscription Asset Managerv8Will not fix

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1150848v8: IPC and v8 issue fixed in Google Chrome 38.0.2125.101

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 11 лет назад

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

nvd
больше 11 лет назад

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

debian
больше 11 лет назад

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 ...

github
больше 3 лет назад

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

6.8 Medium

CVSS2