CVEvulnerability
CVE-2014-7939
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.
Affected configurations
• google chrome (<= 40.0.2214.85)
• chromium chromium 40.0.2214.110
• redhat enterprise linux desktop supplementary 6.0
• redhat enterprise linux server supplementary 6.0
• redhat enterprise linux server supplementary eus 6.6.z
• redhat enterprise linux workstation supplementary 6.0
• opensuse opensuse 13.1
• opensuse opensuse 13.2
Related
Weakness · not in database (1)
References
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0093.html rhn.redhat.com
- http://secunia.com/advisories/62383 secunia.com
- http://secunia.com/advisories/62665 secunia.com
- http://security.gentoo.org/glsa/glsa-201502-13.xml security.gentoo.org
- http://www.securityfocus.com/bid/72288 www.securityfocus.com
- http://www.securitytracker.com/id/1031623 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=399951 code.google.com
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-0093.html rhn.redhat.com
- http://secunia.com/advisories/62383 secunia.com
- http://secunia.com/advisories/62665 secunia.com
- http://security.gentoo.org/glsa/glsa-201502-13.xml security.gentoo.org
- http://www.securityfocus.com/bid/72288 www.securityfocus.com
- http://www.securitytracker.com/id/1031623 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=399951 code.google.com