What is the severity of CVE-2014-9648?

CVE-2014-9648 has been assigned a moderate severity level due to its potential for causing a denial of service.

How do I fix CVE-2014-9648?

To fix CVE-2014-9648, users should upgrade to Google Chrome version 40.0.2214.91 or later.

Who is affected by CVE-2014-9648?

CVE-2014-9648 affects users of Google Chrome on Android versions prior to 40.0.2214.91.

What type of attack does CVE-2014-9648 enable?

CVE-2014-9648 allows remote attackers to cause a denial of service through improper handling of intent: URLs.

When was CVE-2014-9648 discovered?

CVE-2014-9648 was disclosed in early 2015 and relates to vulnerabilities prior to Chrome version 40.

Vulnerability/
CVE-2014-9648

medium

4.3

CWE

284

27/1/2015

21/2/2015

CVE-2014-9648

First published: Tue Jan 27 2015(Updated: )

components/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service (loss of browser access to that site) via crafted JavaScript code, as demonstrated by pandora.com and the Pandora application, a different vulnerability than CVE-2015-1205.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Google Chrome	<=40.0.2214.85

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-9648?
CVE-2014-9648 has been assigned a moderate severity level due to its potential for causing a denial of service.
How do I fix CVE-2014-9648?
To fix CVE-2014-9648, users should upgrade to Google Chrome version 40.0.2214.91 or later.
Who is affected by CVE-2014-9648?
CVE-2014-9648 affects users of Google Chrome on Android versions prior to 40.0.2214.91.
What type of attack does CVE-2014-9648 enable?
CVE-2014-9648 allows remote attackers to cause a denial of service through improper handling of intent: URLs.
When was CVE-2014-9648 discovered?
CVE-2014-9648 was disclosed in early 2015 and relates to vulnerabilities prior to Chrome version 40.

agent/author
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/type
agent/weakness
collector/nvd-index
agent/software-canonical-lookup-request
vendor/google
canonical/google chrome
version/google chrome/40.0.2214.85

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2014-9648?
CVE-2014-9648 has been assigned a moderate severity level due to its potential for causing a denial of service.
How do I fix CVE-2014-9648?
To fix CVE-2014-9648, users should upgrade to Google Chrome version 40.0.2214.91 or later.
Who is affected by CVE-2014-9648?
CVE-2014-9648 affects users of Google Chrome on Android versions prior to 40.0.2214.91.
What type of attack does CVE-2014-9648 enable?
CVE-2014-9648 allows remote attackers to cause a denial of service through improper handling of intent: URLs.
When was CVE-2014-9648 discovered?
CVE-2014-9648 was disclosed in early 2015 and relates to vulnerabilities prior to Chrome version 40.