NVD

Id
35213  
Name
CVE-2014-7939  
Description
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-22  
Modified Date
2017-01-02  
Seq
2014-7939  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180301 35213 CVE-2014-7939 http://googlechromereleases.blogspot.com/2015/01/stable-update.html  View
180302 35213 CVE-2014-7939 openSUSE-SU-2015:0441  View
180303 35213 CVE-2014-7939 RHSA-2015:0093  View
180304 35213 CVE-2014-7939 62383  View
180305 35213 CVE-2014-7939 62665  View
180306 35213 CVE-2014-7939 GLSA-201502-13  View
180307 35213 CVE-2014-7939 72288  View
180308 35213 CVE-2014-7939 1031623  View
180309 35213 CVE-2014-7939 https://code.google.com/p/chromium/issues/detail?id=399951  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18899 JVNDB-2014-007774 Google Chrome における同一生成元ポリシーを回避される脆弱性 Google Chrome には、Google V8 の Harmony プロキシが有効になっている場合、"X-Content-Type-Options: nosniff" ヘッダが欠落した HTTP レスポンスに関する処理に不備があるため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2014-7939 75232 CVE-2014-7939 35213 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007774.html 2014-08-03 2015-03-18 View