Lucene search

[email protected]NVD:CVE-2014-3803

HistoryMay 21, 2014 - 11:14 a.m.

CVE-2014-3803

2014-05-2111:14:10

CWE-200

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.8%

JSON

The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.

Affected configurations

NVD

Node

googlechromeRange≤35.0.1916.113

googlechromeMatch35.0.1916.0

googlechromeMatch35.0.1916.1

googlechromeMatch35.0.1916.2

googlechromeMatch35.0.1916.3

googlechromeMatch35.0.1916.4

googlechromeMatch35.0.1916.5

googlechromeMatch35.0.1916.6

googlechromeMatch35.0.1916.7

googlechromeMatch35.0.1916.8

googlechromeMatch35.0.1916.9

googlechromeMatch35.0.1916.10

googlechromeMatch35.0.1916.11

googlechromeMatch35.0.1916.13

googlechromeMatch35.0.1916.14

googlechromeMatch35.0.1916.15

googlechromeMatch35.0.1916.17

googlechromeMatch35.0.1916.18

googlechromeMatch35.0.1916.19

googlechromeMatch35.0.1916.20

googlechromeMatch35.0.1916.21

googlechromeMatch35.0.1916.22

googlechromeMatch35.0.1916.23

googlechromeMatch35.0.1916.27

googlechromeMatch35.0.1916.31

googlechromeMatch35.0.1916.32

googlechromeMatch35.0.1916.33

googlechromeMatch35.0.1916.34

googlechromeMatch35.0.1916.35

googlechromeMatch35.0.1916.36

googlechromeMatch35.0.1916.37

googlechromeMatch35.0.1916.38

googlechromeMatch35.0.1916.39

googlechromeMatch35.0.1916.40

googlechromeMatch35.0.1916.41

googlechromeMatch35.0.1916.42

googlechromeMatch35.0.1916.43

googlechromeMatch35.0.1916.44

googlechromeMatch35.0.1916.45

googlechromeMatch35.0.1916.46

googlechromeMatch35.0.1916.47

googlechromeMatch35.0.1916.48

googlechromeMatch35.0.1916.49

googlechromeMatch35.0.1916.51

googlechromeMatch35.0.1916.52

googlechromeMatch35.0.1916.54

googlechromeMatch35.0.1916.56

googlechromeMatch35.0.1916.57

googlechromeMatch35.0.1916.59

googlechromeMatch35.0.1916.61

googlechromeMatch35.0.1916.68

googlechromeMatch35.0.1916.69

googlechromeMatch35.0.1916.71

googlechromeMatch35.0.1916.72

googlechromeMatch35.0.1916.74

googlechromeMatch35.0.1916.77

googlechromeMatch35.0.1916.80

googlechromeMatch35.0.1916.82

googlechromeMatch35.0.1916.84

googlechromeMatch35.0.1916.85

googlechromeMatch35.0.1916.86

googlechromeMatch35.0.1916.88

googlechromeMatch35.0.1916.90

googlechromeMatch35.0.1916.92

googlechromeMatch35.0.1916.93

googlechromeMatch35.0.1916.95

googlechromeMatch35.0.1916.96

googlechromeMatch35.0.1916.98

googlechromeMatch35.0.1916.99

googlechromeMatch35.0.1916.101

googlechromeMatch35.0.1916.103

googlechromeMatch35.0.1916.104

googlechromeMatch35.0.1916.105

googlechromeMatch35.0.1916.106

googlechromeMatch35.0.1916.107

googlechromeMatch35.0.1916.108

googlechromeMatch35.0.1916.109

googlechromeMatch35.0.1916.110

googlechromeMatch35.0.1916.111

googlechromeMatch35.0.1916.112

References

blog.guya.net/2014/04/07/to-listen-without-consent-abusing-the-html5-speech/

googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

secunia.com/advisories/60372

www.securityfocus.com/bid/67582

code.google.com/p/chromium/issues/detail?id=360448

src.chromium.org/viewvc/blink?revision=171373&view=revision

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.8%

JSON

Related for NVD:CVE-2014-3803

prion1 cvelist1 ubuntucve1 cve1 debiancve1 nessus5 openvas5 osv1 ubuntu1