Vulnetix
Try Vulnetix Request Demo
CVE-2014-3197 PUBLISHED

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.

EPSS 0.31% · 53.9th percentile

Risk Scores

EPSS Score
0.31%
53.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSoxide-qt0, 1.0.0~bzr437-0ubuntu1, 1.0.0~bzr452-0ubuntu1

Timeline

References

Open in Interactive Console →