CVE-2014-3176: Code Injection
Published Aug 27, 2014
·Updated
Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.
Affected Software
82 affected components
Google Chrome<=37.0.2062.93
Google Chrome=37.0.2062.0
Google Chrome=37.0.2062.1
Google Chrome=37.0.2062.2
Google Chrome=37.0.2062.3
Google Chrome=37.0.2062.4
Google Chrome=37.0.2062.5
Google Chrome=37.0.2062.6
Google Chrome=37.0.2062.7
Google Chrome=37.0.2062.8
Google Chrome=37.0.2062.9
Google Chrome=37.0.2062.10
Google Chrome=37.0.2062.11
Google Chrome=37.0.2062.12
Google Chrome=37.0.2062.13
Google Chrome=37.0.2062.14
Google Chrome=37.0.2062.15
Google Chrome=37.0.2062.16
Google Chrome=37.0.2062.17
Google Chrome=37.0.2062.18
Google Chrome=37.0.2062.19
Google Chrome=37.0.2062.20
Google Chrome=37.0.2062.21
Google Chrome=37.0.2062.22
Google Chrome=37.0.2062.23
Google Chrome=37.0.2062.24
Google Chrome=37.0.2062.25
Google Chrome=37.0.2062.26
Google Chrome=37.0.2062.27
Google Chrome=37.0.2062.28
Google Chrome=37.0.2062.29
Google Chrome=37.0.2062.30
Google Chrome=37.0.2062.31
Google Chrome=37.0.2062.32
Google Chrome=37.0.2062.33
Google Chrome=37.0.2062.34
Google Chrome=37.0.2062.35
Google Chrome=37.0.2062.36
Google Chrome=37.0.2062.37
Google Chrome=37.0.2062.39
Google Chrome=37.0.2062.43
Google Chrome=37.0.2062.44
Google Chrome=37.0.2062.45
Google Chrome=37.0.2062.46
Google Chrome=37.0.2062.47
Google Chrome=37.0.2062.48
Google Chrome=37.0.2062.49
Google Chrome=37.0.2062.50
Google Chrome=37.0.2062.51
Google Chrome=37.0.2062.52
Google Chrome=37.0.2062.53
Google Chrome=37.0.2062.54
Google Chrome=37.0.2062.55
Google Chrome=37.0.2062.56
Google Chrome=37.0.2062.57
Google Chrome=37.0.2062.58
Google Chrome=37.0.2062.59
Google Chrome=37.0.2062.60
Google Chrome=37.0.2062.61
Google Chrome=37.0.2062.62
Google Chrome=37.0.2062.63
Google Chrome=37.0.2062.64
Google Chrome=37.0.2062.65
Google Chrome=37.0.2062.66
Google Chrome=37.0.2062.67
Google Chrome=37.0.2062.68
Google Chrome=37.0.2062.69
Google Chrome=37.0.2062.70
Google Chrome=37.0.2062.71
Google Chrome=37.0.2062.72
Google Chrome=37.0.2062.73
Google Chrome=37.0.2062.74
Google Chrome=37.0.2062.75
Google Chrome=37.0.2062.76
Google Chrome=37.0.2062.77
Google Chrome=37.0.2062.78
Google Chrome=37.0.2062.80
Google Chrome=37.0.2062.81
Google Chrome=37.0.2062.89
Google Chrome=37.0.2062.90
Google Chrome=37.0.2062.91
Google Chrome=37.0.2062.92
Event History
Aug 27, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3176?
CVE-2014-3176 is rated as high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2014-3176?
To fix CVE-2014-3176, update Google Chrome to version 37.0.2062.94 or later.
3
What versions of Google Chrome are affected by CVE-2014-3176?
CVE-2014-3176 affects Google Chrome versions prior to 37.0.2062.94.
4
Can CVE-2014-3176 be exploited remotely?
Yes, CVE-2014-3176 can be exploited remotely by attackers through the interaction of extensions and the sync API.
5
What kind of vulnerability is CVE-2014-3176?
CVE-2014-3176 is a vulnerability that allows for remote code execution due to improper handling of inter-process communication.