CVE-2014-3197 in Chrome

Sumário (Inglês)

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

03/05/2014

Divulgação

08/10/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
67783	Google Chrome XSS Auditor Elevação de Privilégios	264	Não provado	Correção oficial	CVE-2014-3197

Fontes

• MITRE
• NVD
• CVE Details