CVE-2014-3160 in Google Chrome
摘要 (英语)
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
预定
2014-05-03
披露
2014-07-20
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 67174 | Google Chrome SVG 权限提升 | 264 | 未经证实 | 官方修复 | CVE-2014-3160 |