Lucene search

K
nvd[email protected]NVD:CVE-2014-3192
HistoryOct 08, 2014 - 10:55 a.m.

CVE-2014-3192

2014-10-0810:55:06
CWE-416
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.3%

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Affected configurations

NVD
Node
redhatenterprise_linux_desktop_supplementaryMatch6.0
OR
redhatenterprise_linux_server_supplementaryMatch6.0
OR
redhatenterprise_linux_server_supplementary_eusMatch6.6.z
OR
redhatenterprise_linux_workstation_supplementaryMatch6.0
Node
appleitunesRange12.1.3
OR
applesafariMatch6.2.2
OR
applesafariMatch7.1.2
OR
applesafariMatch8.0.2
OR
appleiphone_osRange8.1.2
OR
appletvosRange7.0.1
Node
googlechromeRange38.0.2125.7

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.3%