CVE-2014-3188: Code Injection
Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3188?
CVE-2014-3188 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2014-3188?
To fix CVE-2014-3188, users should update their Google Chrome or Chrome OS to version 38.0.2125.101 or later.
What types of attacks are possible with CVE-2014-3188?
CVE-2014-3188 allows remote attackers to execute arbitrary code through improper parsing of JSON data.
Which versions of Google Chrome are affected by CVE-2014-3188?
Google Chrome versions prior to 38.0.2125.101 are affected by CVE-2014-3188.
Can CVE-2014-3188 affect Red Hat Enterprise Linux systems?
Yes, CVE-2014-3188 can affect Red Hat Enterprise Linux systems, specifically version 6.0 and 6.6.z.