CVE-2014-3199 PUBLISHED

The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.

EPSS 0.83% · 74.5th percentile

Risk Scores

EPSS Score
0.83%
74.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSchromium-browser0, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1
Ubuntu:14.04:LTSoxide-qt0, 1.0.0~bzr437-0ubuntu1, 1.0.0~bzr452-0ubuntu1
Ubuntu:16.04:LTSlibv8-3.140, 3.14.5.8-5ubuntu2
Ubuntu:18.04:LTSlibv8-3.140, 3.14.5.8-11ubuntu1

Timeline

References

Open in Interactive Console →