CVE-2014-3201 in Chrome
Summary
core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/03/2014
Disclosure
10/09/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67768 | Google Chrome Scrollbar memory corruption | 119 | Unproven | Official fix | CVE-2014-3201 |