CVEvulnerability
CVE-2014-1716
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."
Affected configurations
• google chrome (<= 34.0.1847.115)
• debian debian linux 7.0
• debian debian linux 8.0
• opensuse opensuse 12.3
• opensuse opensuse 13.1
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html lists.opensuse.org
- http://security.gentoo.org/glsa/glsa-201408-16.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-2905 www.debian.org
- https://code.google.com/p/chromium/issues/detail?id=354123 code.google.com
- https://code.google.com/p/v8/source/detail?r=20138 code.google.com
- http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00012.html lists.opensuse.org
- http://security.gentoo.org/glsa/glsa-201408-16.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-2905 www.debian.org
- https://code.google.com/p/chromium/issues/detail?id=354123 code.google.com
- https://code.google.com/p/v8/source/detail?r=20138 code.google.com