NVD

Id
31413  
Name
CVE-2014-3170  
Description
extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a "" character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-26  
Modified Date
2017-01-06  
Seq
2014-3170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164519 31413 CVE-2014-3170 http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html  View
164520 31413 CVE-2014-3170 openSUSE-SU-2014:1151  View
164521 31413 CVE-2014-3170 60268  View
164522 31413 CVE-2014-3170 61482  View
164523 31413 CVE-2014-3170 GLSA-201408-16  View
164524 31413 CVE-2014-3170 DSA-3039  View
164525 31413 CVE-2014-3170 69400  View
164526 31413 CVE-2014-3170 1030767  View
164527 31413 CVE-2014-3170 google-chrome-cve20143170-spoofing(95470)  View
164528 31413 CVE-2014-3170 https://crbug.com/390624  View
164529 31413 CVE-2014-3170 https://src.chromium.org/viewvc/chrome?revision=285492&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15093 JVNDB-2014-003968 Google Chrome の extensions/common/url_pattern.cc における拡張機能のパーミッションダイアログを偽装される脆弱性 Google Chrome の extensions/common/url_pattern.cc は、ホスト名の "" 文字の使用を制限しないため、拡張機能のパーミッションダイアログを偽装される脆弱性が存在します。 CVE-2014-3170 70457 CVE-2014-3170 31413 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003968.html 2014-08-26 2014-08-28 View