CVE-2014-3187 in Chrome
Summary
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/03/2014
Disclosure
10/08/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67765 | Google Chrome Facetime Scheme cross site scripting | 79 | Unproven | Official fix | CVE-2014-3187 |