// For flags

CVE-2014-3160

Ubuntu Security Notice USN-2298-1

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.

La función ResourceFetcher::canRequest en core/fetch/ResourceFetcher.cpp en Blink, utilizado en Google Chrome anterior a 36.0.1985.125, no restringe debidamente las solicitudes de subrecursos asociados con ficheros SVG, lo que permite a atacantes remotos evadir Same Origin Policy a través de un fichero manipulado.

A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. A type confusion bug was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. Various other issues were also addressed.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2014-05-03 CVE Reserved
  • 2014-07-20 CVE Published
  • 2023-11-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-264: Permissions, Privileges, and Access Controls
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Debian
Search vendor "Debian"
Debian Linux
Search vendor "Debian" for product "Debian Linux"
7.0
Search vendor "Debian" for product "Debian Linux" and version "7.0"
-
Affected
Debian
Search vendor "Debian"
Debian Linux
Search vendor "Debian" for product "Debian Linux"
8.0
Search vendor "Debian" for product "Debian Linux" and version "8.0"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.1
Search vendor "Google" for product "Chrome" and version "36.0.1985.1"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.2
Search vendor "Google" for product "Chrome" and version "36.0.1985.2"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.3
Search vendor "Google" for product "Chrome" and version "36.0.1985.3"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.4
Search vendor "Google" for product "Chrome" and version "36.0.1985.4"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.5
Search vendor "Google" for product "Chrome" and version "36.0.1985.5"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.6
Search vendor "Google" for product "Chrome" and version "36.0.1985.6"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.8
Search vendor "Google" for product "Chrome" and version "36.0.1985.8"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.12
Search vendor "Google" for product "Chrome" and version "36.0.1985.12"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.13
Search vendor "Google" for product "Chrome" and version "36.0.1985.13"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.14
Search vendor "Google" for product "Chrome" and version "36.0.1985.14"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.15
Search vendor "Google" for product "Chrome" and version "36.0.1985.15"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.16
Search vendor "Google" for product "Chrome" and version "36.0.1985.16"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.17
Search vendor "Google" for product "Chrome" and version "36.0.1985.17"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.18
Search vendor "Google" for product "Chrome" and version "36.0.1985.18"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.19
Search vendor "Google" for product "Chrome" and version "36.0.1985.19"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.20
Search vendor "Google" for product "Chrome" and version "36.0.1985.20"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.21
Search vendor "Google" for product "Chrome" and version "36.0.1985.21"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.22
Search vendor "Google" for product "Chrome" and version "36.0.1985.22"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.23
Search vendor "Google" for product "Chrome" and version "36.0.1985.23"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.24
Search vendor "Google" for product "Chrome" and version "36.0.1985.24"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.25
Search vendor "Google" for product "Chrome" and version "36.0.1985.25"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.26
Search vendor "Google" for product "Chrome" and version "36.0.1985.26"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.27
Search vendor "Google" for product "Chrome" and version "36.0.1985.27"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.28
Search vendor "Google" for product "Chrome" and version "36.0.1985.28"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.29
Search vendor "Google" for product "Chrome" and version "36.0.1985.29"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.30
Search vendor "Google" for product "Chrome" and version "36.0.1985.30"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.31
Search vendor "Google" for product "Chrome" and version "36.0.1985.31"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.32
Search vendor "Google" for product "Chrome" and version "36.0.1985.32"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.33
Search vendor "Google" for product "Chrome" and version "36.0.1985.33"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.34
Search vendor "Google" for product "Chrome" and version "36.0.1985.34"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.35
Search vendor "Google" for product "Chrome" and version "36.0.1985.35"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.36
Search vendor "Google" for product "Chrome" and version "36.0.1985.36"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.37
Search vendor "Google" for product "Chrome" and version "36.0.1985.37"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.38
Search vendor "Google" for product "Chrome" and version "36.0.1985.38"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.39
Search vendor "Google" for product "Chrome" and version "36.0.1985.39"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.40
Search vendor "Google" for product "Chrome" and version "36.0.1985.40"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.41
Search vendor "Google" for product "Chrome" and version "36.0.1985.41"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.42
Search vendor "Google" for product "Chrome" and version "36.0.1985.42"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.43
Search vendor "Google" for product "Chrome" and version "36.0.1985.43"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.44
Search vendor "Google" for product "Chrome" and version "36.0.1985.44"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.45
Search vendor "Google" for product "Chrome" and version "36.0.1985.45"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.46
Search vendor "Google" for product "Chrome" and version "36.0.1985.46"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.47
Search vendor "Google" for product "Chrome" and version "36.0.1985.47"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.48
Search vendor "Google" for product "Chrome" and version "36.0.1985.48"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.49
Search vendor "Google" for product "Chrome" and version "36.0.1985.49"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.50
Search vendor "Google" for product "Chrome" and version "36.0.1985.50"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.51
Search vendor "Google" for product "Chrome" and version "36.0.1985.51"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.52
Search vendor "Google" for product "Chrome" and version "36.0.1985.52"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.53
Search vendor "Google" for product "Chrome" and version "36.0.1985.53"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.54
Search vendor "Google" for product "Chrome" and version "36.0.1985.54"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.55
Search vendor "Google" for product "Chrome" and version "36.0.1985.55"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.56
Search vendor "Google" for product "Chrome" and version "36.0.1985.56"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.57
Search vendor "Google" for product "Chrome" and version "36.0.1985.57"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.58
Search vendor "Google" for product "Chrome" and version "36.0.1985.58"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.59
Search vendor "Google" for product "Chrome" and version "36.0.1985.59"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.60
Search vendor "Google" for product "Chrome" and version "36.0.1985.60"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.61
Search vendor "Google" for product "Chrome" and version "36.0.1985.61"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.62
Search vendor "Google" for product "Chrome" and version "36.0.1985.62"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.63
Search vendor "Google" for product "Chrome" and version "36.0.1985.63"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.64
Search vendor "Google" for product "Chrome" and version "36.0.1985.64"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.65
Search vendor "Google" for product "Chrome" and version "36.0.1985.65"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.66
Search vendor "Google" for product "Chrome" and version "36.0.1985.66"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.67
Search vendor "Google" for product "Chrome" and version "36.0.1985.67"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.68
Search vendor "Google" for product "Chrome" and version "36.0.1985.68"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.69
Search vendor "Google" for product "Chrome" and version "36.0.1985.69"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.70
Search vendor "Google" for product "Chrome" and version "36.0.1985.70"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.72
Search vendor "Google" for product "Chrome" and version "36.0.1985.72"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.73
Search vendor "Google" for product "Chrome" and version "36.0.1985.73"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.74
Search vendor "Google" for product "Chrome" and version "36.0.1985.74"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.75
Search vendor "Google" for product "Chrome" and version "36.0.1985.75"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.76
Search vendor "Google" for product "Chrome" and version "36.0.1985.76"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.77
Search vendor "Google" for product "Chrome" and version "36.0.1985.77"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.78
Search vendor "Google" for product "Chrome" and version "36.0.1985.78"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.79
Search vendor "Google" for product "Chrome" and version "36.0.1985.79"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.81
Search vendor "Google" for product "Chrome" and version "36.0.1985.81"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.82
Search vendor "Google" for product "Chrome" and version "36.0.1985.82"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.83
Search vendor "Google" for product "Chrome" and version "36.0.1985.83"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.84
Search vendor "Google" for product "Chrome" and version "36.0.1985.84"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.85
Search vendor "Google" for product "Chrome" and version "36.0.1985.85"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.86
Search vendor "Google" for product "Chrome" and version "36.0.1985.86"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.87
Search vendor "Google" for product "Chrome" and version "36.0.1985.87"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.88
Search vendor "Google" for product "Chrome" and version "36.0.1985.88"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.89
Search vendor "Google" for product "Chrome" and version "36.0.1985.89"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.90
Search vendor "Google" for product "Chrome" and version "36.0.1985.90"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.91
Search vendor "Google" for product "Chrome" and version "36.0.1985.91"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.92
Search vendor "Google" for product "Chrome" and version "36.0.1985.92"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.93
Search vendor "Google" for product "Chrome" and version "36.0.1985.93"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.94
Search vendor "Google" for product "Chrome" and version "36.0.1985.94"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.95
Search vendor "Google" for product "Chrome" and version "36.0.1985.95"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.96
Search vendor "Google" for product "Chrome" and version "36.0.1985.96"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.97
Search vendor "Google" for product "Chrome" and version "36.0.1985.97"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.98
Search vendor "Google" for product "Chrome" and version "36.0.1985.98"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.99
Search vendor "Google" for product "Chrome" and version "36.0.1985.99"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.100
Search vendor "Google" for product "Chrome" and version "36.0.1985.100"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.101
Search vendor "Google" for product "Chrome" and version "36.0.1985.101"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.102
Search vendor "Google" for product "Chrome" and version "36.0.1985.102"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.103
Search vendor "Google" for product "Chrome" and version "36.0.1985.103"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.104
Search vendor "Google" for product "Chrome" and version "36.0.1985.104"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.105
Search vendor "Google" for product "Chrome" and version "36.0.1985.105"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.106
Search vendor "Google" for product "Chrome" and version "36.0.1985.106"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.122
Search vendor "Google" for product "Chrome" and version "36.0.1985.122"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.123
Search vendor "Google" for product "Chrome" and version "36.0.1985.123"
-
Affected
Google
Search vendor "Google"
Chrome
Search vendor "Google" for product "Chrome"
36.0.1985.124
Search vendor "Google" for product "Chrome" and version "36.0.1985.124"
-
Affected