Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-3803

Опубликовано: 21 мая 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3

Описание

The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.

РелизСтатусПримечание
devel

released

35.0.1916.153-0ubuntu1~pkg1029
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [36.0.1985.125-0ubuntu1.14.04.0~pkg1029]]
lucid

ignored

end of life
precise

released

36.0.1985.125-0ubuntu1.12.04.0~pkg897
saucy

ignored

end of life
trusty

released

36.0.1985.125-0ubuntu1.14.04.0~pkg1029
trusty/esm

DNE

trusty was released [36.0.1985.125-0ubuntu1.14.04.0~pkg1029]
upstream

released

35.0.1916.114

Показывать по

РелизСтатусПримечание
devel

released

1.1.0~bzr640-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1.0.4-0ubuntu0.14.04.1]]
lucid

DNE

precise

DNE

saucy

DNE

trusty

released

1.0.4-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1.0.4-0ubuntu0.14.04.1]
upstream

released

1.0.4

Показывать по

EPSS

Процентиль: 71%
0.00682
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

nvd
больше 11 лет назад

The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.

debian
больше 11 лет назад

The SpeechInput feature in Blink, as used in Google Chrome before 35.0 ...

github
больше 3 лет назад

The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.

EPSS

Процентиль: 71%
0.00682
Низкий

4.3 Medium

CVSS2