4.3

CVE-2014-3803

Exploit
The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 35.0.1916.113
Google ≫ Chrome Version35.0.1916.0
Google ≫ Chrome Version35.0.1916.1
Google ≫ Chrome Version35.0.1916.2
Google ≫ Chrome Version35.0.1916.3
Google ≫ Chrome Version35.0.1916.4
Google ≫ Chrome Version35.0.1916.5
Google ≫ Chrome Version35.0.1916.6
Google ≫ Chrome Version35.0.1916.7
Google ≫ Chrome Version35.0.1916.8
Google ≫ Chrome Version35.0.1916.9
Google ≫ Chrome Version35.0.1916.10
Google ≫ Chrome Version35.0.1916.11
Google ≫ Chrome Version35.0.1916.13
Google ≫ Chrome Version35.0.1916.14
Google ≫ Chrome Version35.0.1916.15
Google ≫ Chrome Version35.0.1916.17
Google ≫ Chrome Version35.0.1916.18
Google ≫ Chrome Version35.0.1916.19
Google ≫ Chrome Version35.0.1916.20
Google ≫ Chrome Version35.0.1916.21
Google ≫ Chrome Version35.0.1916.22
Google ≫ Chrome Version35.0.1916.23
Google ≫ Chrome Version35.0.1916.27
Google ≫ Chrome Version35.0.1916.31
Google ≫ Chrome Version35.0.1916.32
Google ≫ Chrome Version35.0.1916.33
Google ≫ Chrome Version35.0.1916.34
Google ≫ Chrome Version35.0.1916.35
Google ≫ Chrome Version35.0.1916.36
Google ≫ Chrome Version35.0.1916.37
Google ≫ Chrome Version35.0.1916.38
Google ≫ Chrome Version35.0.1916.39
Google ≫ Chrome Version35.0.1916.40
Google ≫ Chrome Version35.0.1916.41
Google ≫ Chrome Version35.0.1916.42
Google ≫ Chrome Version35.0.1916.43
Google ≫ Chrome Version35.0.1916.44
Google ≫ Chrome Version35.0.1916.45
Google ≫ Chrome Version35.0.1916.46
Google ≫ Chrome Version35.0.1916.47
Google ≫ Chrome Version35.0.1916.48
Google ≫ Chrome Version35.0.1916.49
Google ≫ Chrome Version35.0.1916.51
Google ≫ Chrome Version35.0.1916.52
Google ≫ Chrome Version35.0.1916.54
Google ≫ Chrome Version35.0.1916.56
Google ≫ Chrome Version35.0.1916.57
Google ≫ Chrome Version35.0.1916.59
Google ≫ Chrome Version35.0.1916.61
Google ≫ Chrome Version35.0.1916.68
Google ≫ Chrome Version35.0.1916.69
Google ≫ Chrome Version35.0.1916.71
Google ≫ Chrome Version35.0.1916.72
Google ≫ Chrome Version35.0.1916.74
Google ≫ Chrome Version35.0.1916.77
Google ≫ Chrome Version35.0.1916.80
Google ≫ Chrome Version35.0.1916.82
Google ≫ Chrome Version35.0.1916.84
Google ≫ Chrome Version35.0.1916.85
Google ≫ Chrome Version35.0.1916.86
Google ≫ Chrome Version35.0.1916.88
Google ≫ Chrome Version35.0.1916.90
Google ≫ Chrome Version35.0.1916.92
Google ≫ Chrome Version35.0.1916.93
Google ≫ Chrome Version35.0.1916.95
Google ≫ Chrome Version35.0.1916.96
Google ≫ Chrome Version35.0.1916.98
Google ≫ Chrome Version35.0.1916.99
Google ≫ Chrome Version35.0.1916.101
Google ≫ Chrome Version35.0.1916.103
Google ≫ Chrome Version35.0.1916.104
Google ≫ Chrome Version35.0.1916.105
Google ≫ Chrome Version35.0.1916.106
Google ≫ Chrome Version35.0.1916.107
Google ≫ Chrome Version35.0.1916.108
Google ≫ Chrome Version35.0.1916.109
Google ≫ Chrome Version35.0.1916.110
Google ≫ Chrome Version35.0.1916.111
Google ≫ Chrome Version35.0.1916.112
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.36% 0.681
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/60372
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
Vendor Advisory
http://blog.guya.net/2014/04/07/to-listen-without-consent-abusing-the-html5-speech/
Exploit
http://www.securityfocus.com/bid/67582
Third Party Advisory
VDB Entry
https://code.google.com/p/chromium/issues/detail?id=360448
Exploit
https://src.chromium.org/viewvc/blink?revision=171373&view=revision
Vendor Advisory