CVE-2014-3188 | BDVDB-2026-64713 Detail

Description#

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2014-1626.html
http://googlechromereleases.blogspot.com/2014/10/stable-channel-update-for-chrome-os.html
https://crbug.com/416449
https://code.google.com/p/v8/source/detail?r=24125
http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html

Exploit#

No public exploit known

History#

Version 12014-10-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.