CVE-2014-3177: Code Injection
Published Aug 27, 2014
·Updated
Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.
Affected Software
82 affected components
Google Chrome<=37.0.2062.93
Google Chrome=37.0.2062.0
Google Chrome=37.0.2062.1
Google Chrome=37.0.2062.2
Google Chrome=37.0.2062.3
Google Chrome=37.0.2062.4
Google Chrome=37.0.2062.5
Google Chrome=37.0.2062.6
Google Chrome=37.0.2062.7
Google Chrome=37.0.2062.8
Google Chrome=37.0.2062.9
Google Chrome=37.0.2062.10
Google Chrome=37.0.2062.11
Google Chrome=37.0.2062.12
Google Chrome=37.0.2062.13
Google Chrome=37.0.2062.14
Google Chrome=37.0.2062.15
Google Chrome=37.0.2062.16
Google Chrome=37.0.2062.17
Google Chrome=37.0.2062.18
Google Chrome=37.0.2062.19
Google Chrome=37.0.2062.20
Google Chrome=37.0.2062.21
Google Chrome=37.0.2062.22
Google Chrome=37.0.2062.23
Google Chrome=37.0.2062.24
Google Chrome=37.0.2062.25
Google Chrome=37.0.2062.26
Google Chrome=37.0.2062.27
Google Chrome=37.0.2062.28
Google Chrome=37.0.2062.29
Google Chrome=37.0.2062.30
Google Chrome=37.0.2062.31
Google Chrome=37.0.2062.32
Google Chrome=37.0.2062.33
Google Chrome=37.0.2062.34
Google Chrome=37.0.2062.35
Google Chrome=37.0.2062.36
Google Chrome=37.0.2062.37
Google Chrome=37.0.2062.39
Google Chrome=37.0.2062.43
Google Chrome=37.0.2062.44
Google Chrome=37.0.2062.45
Google Chrome=37.0.2062.46
Google Chrome=37.0.2062.47
Google Chrome=37.0.2062.48
Google Chrome=37.0.2062.49
Google Chrome=37.0.2062.50
Google Chrome=37.0.2062.51
Google Chrome=37.0.2062.52
Google Chrome=37.0.2062.53
Google Chrome=37.0.2062.54
Google Chrome=37.0.2062.55
Google Chrome=37.0.2062.56
Google Chrome=37.0.2062.57
Google Chrome=37.0.2062.58
Google Chrome=37.0.2062.59
Google Chrome=37.0.2062.60
Google Chrome=37.0.2062.61
Google Chrome=37.0.2062.62
Google Chrome=37.0.2062.63
Google Chrome=37.0.2062.64
Google Chrome=37.0.2062.65
Google Chrome=37.0.2062.66
Google Chrome=37.0.2062.67
Google Chrome=37.0.2062.68
Google Chrome=37.0.2062.69
Google Chrome=37.0.2062.70
Google Chrome=37.0.2062.71
Google Chrome=37.0.2062.72
Google Chrome=37.0.2062.73
Google Chrome=37.0.2062.74
Google Chrome=37.0.2062.75
Google Chrome=37.0.2062.76
Google Chrome=37.0.2062.77
Google Chrome=37.0.2062.78
Google Chrome=37.0.2062.80
Google Chrome=37.0.2062.81
Google Chrome=37.0.2062.89
Google Chrome=37.0.2062.90
Google Chrome=37.0.2062.91
Google Chrome=37.0.2062.92
Event History
Aug 27, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3177?
CVE-2014-3177 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2014-3177?
The fix for CVE-2014-3177 is to upgrade Google Chrome to version 37.0.2062.94 or later.
3
What types of attacks does CVE-2014-3177 enable?
CVE-2014-3177 allows remote attackers to execute arbitrary code on the affected systems.
4
Which versions of Google Chrome are affected by CVE-2014-3177?
Google Chrome versions prior to 37.0.2062.94 are affected by CVE-2014-3177.
5
Is CVE-2014-3177 related to any other vulnerabilities?
Yes, CVE-2014-3177 is a different vulnerability than CVE-2014-3176, both of which involve similar components.