CVE-2014-3188: Code Injection
First published: Wed Oct 08 2014(Updated: )
Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chrome OS | <=38.0.2125.77 | |
| Google Chrome (Trace Event) | <=38.0.2125.7 | |
| Red Hat Enterprise Linux Desktop | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary EUS | =6.6.z | |
| Red Hat Enterprise Linux Workstation Supplementary | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3188?
CVE-2014-3188 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2014-3188?
To fix CVE-2014-3188, users should update their Google Chrome or Chrome OS to version 38.0.2125.101 or later.
What types of attacks are possible with CVE-2014-3188?
CVE-2014-3188 allows remote attackers to execute arbitrary code through improper parsing of JSON data.
Which versions of Google Chrome are affected by CVE-2014-3188?
Google Chrome versions prior to 38.0.2125.101 are affected by CVE-2014-3188.
Can CVE-2014-3188 affect Red Hat Enterprise Linux systems?
Yes, CVE-2014-3188 can affect Red Hat Enterprise Linux systems, specifically version 6.0 and 6.6.z.
- agent/type
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/chrome os
- version/chrome os/38.0.2125.77
- canonical/google chrome (trace event)
- version/google chrome (trace event)/38.0.2125.7
- vendor/redhat
- canonical/red hat enterprise linux desktop
- version/red hat enterprise linux desktop/6.0
- canonical/red hat enterprise linux server supplementary
- version/red hat enterprise linux server supplementary/6.0
- canonical/red hat enterprise linux server supplementary eus
- version/red hat enterprise linux server supplementary eus/6.6.z
- canonical/red hat enterprise linux workstation supplementary
- version/red hat enterprise linux workstation supplementary/6.0