CVE-2014-3199: Medium severity red hat enterprise linux desktop vulnerability
The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3199?
CVE-2014-3199 is classified as a moderate severity vulnerability due to its potential to cause denial of service.
What are the affected versions for CVE-2014-3199?
CVE-2014-3199 affects Google Chrome versions up to 38.0.2125.7 and specific Red Hat Enterprise Linux versions including 6.0 and 6.6.z.
How do I fix CVE-2014-3199?
To fix CVE-2014-3199, update Google Chrome to a version higher than 38.0.2125.7 or apply the relevant patches provided by Red Hat for affected systems.
Is CVE-2014-3199 still a risk for users?
While CVE-2014-3199 was addressed in updates released in 2014, users on outdated versions may still be at risk.
What type of attack does CVE-2014-3199 facilitate?
CVE-2014-3199 can be exploited by remote attackers to trigger a denial of service condition in affected versions of Google Chrome.