CVEvulnerability
CVE-2014-3177
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-08-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.
Affected configurations
• google chrome (<= 37.0.2062.93)
• google chrome 37.0.2062.0
• google chrome 37.0.2062.1
• google chrome 37.0.2062.2
• google chrome 37.0.2062.3
• google chrome 37.0.2062.4
• google chrome 37.0.2062.5
• google chrome 37.0.2062.6
• google chrome 37.0.2062.7
• google chrome 37.0.2062.8
• google chrome 37.0.2062.9
• google chrome 37.0.2062.10
• google chrome 37.0.2062.11
• google chrome 37.0.2062.12
• google chrome 37.0.2062.13
• google chrome 37.0.2062.14
• google chrome 37.0.2062.15
• google chrome 37.0.2062.16
• google chrome 37.0.2062.17
• google chrome 37.0.2062.18
• google chrome 37.0.2062.19
• google chrome 37.0.2062.20
• google chrome 37.0.2062.21
• google chrome 37.0.2062.22
• google chrome 37.0.2062.23
• google chrome 37.0.2062.24
• google chrome 37.0.2062.25
• google chrome 37.0.2062.26
• google chrome 37.0.2062.27
• google chrome 37.0.2062.28
• google chrome 37.0.2062.29
• google chrome 37.0.2062.30
• google chrome 37.0.2062.31
• google chrome 37.0.2062.32
• google chrome 37.0.2062.33
• google chrome 37.0.2062.34
• google chrome 37.0.2062.35
• google chrome 37.0.2062.36
• google chrome 37.0.2062.37
• google chrome 37.0.2062.39
• google chrome 37.0.2062.43
• google chrome 37.0.2062.44
• google chrome 37.0.2062.45
• google chrome 37.0.2062.46
• google chrome 37.0.2062.47
• google chrome 37.0.2062.48
• google chrome 37.0.2062.49
• google chrome 37.0.2062.50
• google chrome 37.0.2062.51
• google chrome 37.0.2062.52
• google chrome 37.0.2062.53
• google chrome 37.0.2062.54
• google chrome 37.0.2062.55
• google chrome 37.0.2062.56
• google chrome 37.0.2062.57
• google chrome 37.0.2062.58
• google chrome 37.0.2062.59
• google chrome 37.0.2062.60
• google chrome 37.0.2062.61
• google chrome 37.0.2062.62
… and 22 more
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html lists.opensuse.org
- http://secunia.com/advisories/60268 secunia.com
- http://secunia.com/advisories/61482 secunia.com
- http://security.gentoo.org/glsa/glsa-201408-16.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-3039 www.debian.org
- http://www.securityfocus.com/bid/69404 www.securityfocus.com
- http://www.securitytracker.com/id/1030767 www.securitytracker.com
- https://crbug.com/386988 crbug.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95477 exchange.xforce.ibmcloud.com
- http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html lists.opensuse.org
- http://secunia.com/advisories/60268 secunia.com
- http://secunia.com/advisories/61482 secunia.com
- http://security.gentoo.org/glsa/glsa-201408-16.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-3039 www.debian.org
- http://www.securityfocus.com/bid/69404 www.securityfocus.com
- http://www.securitytracker.com/id/1030767 www.securitytracker.com
- https://crbug.com/386988 crbug.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95477 exchange.xforce.ibmcloud.com