CVE-2014-1701

Published Mar 16, 2014 CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Description
The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2883-1 chromium-browser security update
EUVD EUVD EUVD-2014-1775 The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 9:50 AM
Reserved
Jan 29, 2014, 12:00 AM
Status
Modified
Published
Mar 16, 2014, 2:06 PM
Modified
Jun 17, 2026, 12:05 AM