7.5

CVE-2014-3161

The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly interact with redirects, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that hosts a video stream.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 36.0.1985.106
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.1
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.2
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.3
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.4
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.5
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.6
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.8
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.12
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.13
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.14
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.15
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.16
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.17
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.18
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.19
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.20
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.21
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.22
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.23
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.24
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.25
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.26
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.27
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.28
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.29
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.30
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.31
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.32
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.33
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.34
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.35
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.36
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.37
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.38
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.39
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.40
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.41
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.42
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.43
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.44
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.45
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.46
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.47
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.48
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.49
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.50
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.51
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.52
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.53
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.54
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.55
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.56
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.57
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.58
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.59
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.60
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.61
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.62
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.63
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.64
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.65
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.66
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.67
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.68
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.69
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.70
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.72
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.73
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.74
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.75
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.76
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.77
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.78
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.79
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.81
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.82
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.83
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.84
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.85
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.86
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.87
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.88
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.89
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.90
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.91
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.92
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.93
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.94
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.95
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.96
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.97
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.98
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.99
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.100
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.101
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.102
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.103
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.104
   Google ≫ Android
Google ≫ Chrome Version 36.0.1985.105
   Google ≫ Android
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.88% 0.542
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html
https://code.google.com/p/chromium/issues/detail?id=334204
https://src.chromium.org/viewvc/chrome?revision=266396&view=revision