CVE-2014-7948 in Chrome
Summary
The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5 application content via a crafted certificate.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/06/2014
Disclosure
01/22/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68849 | Google Chrome AppCache cryptographic issue | 310 | Unproven | Official fix | CVE-2014-7948 |