CVE-2014-3197: XSS
First published: Wed Oct 08 2014(Updated: )
The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Chrome (Trace Event) | <=38.0.2125.7 | |
| Red Hat Enterprise Linux Desktop | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary | =6.0 | |
| Red Hat Enterprise Linux Server Supplementary EUS | =6.6.z | |
| Red Hat Enterprise Linux Workstation Supplementary | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3197?
The severity of CVE-2014-3197 is classified as high due to the potential for sensitive information disclosure.
How do I fix CVE-2014-3197?
To fix CVE-2014-3197, users should upgrade to Google Chrome version 38.0.2125.101 or later.
Which versions of Google Chrome are affected by CVE-2014-3197?
CVE-2014-3197 affects Google Chrome versions prior to 38.0.2125.101.
Can CVE-2014-3197 be exploited remotely?
Yes, CVE-2014-3197 can be exploited remotely, allowing attackers to obtain sensitive information.
What systems are impacted by CVE-2014-3197?
CVE-2014-3197 impacts specific versions of Google Chrome and various Red Hat Enterprise Linux products.
- agent/type
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google chrome (trace event)
- version/google chrome (trace event)/38.0.2125.7
- vendor/redhat
- canonical/red hat enterprise linux desktop
- version/red hat enterprise linux desktop/6.0
- canonical/red hat enterprise linux server supplementary
- version/red hat enterprise linux server supplementary/6.0
- canonical/red hat enterprise linux server supplementary eus
- version/red hat enterprise linux server supplementary eus/6.6.z
- canonical/red hat enterprise linux workstation supplementary
- version/red hat enterprise linux workstation supplementary/6.0