SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-1726

The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Reference:

DSA-2905

GLSA-201408-16

IAVM:2014-B-0039

http://googlechromereleases.blogspot.com/2014/04/stable-channel-update.html

https://code.google.com/p/chromium/issues/detail?id=346135

https://src.chromium.org/viewvc/chrome?revision=259353&view=revision

openSUSE-SU-2014:0601


30479



423868



248392



909



195452



282