CVE-2014-3192

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-10-07T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-25T19:57:01.000Z", "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome"}, "references": [{"name": "1031647", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1031647"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/HT204245"}, {"name": "RHSA-2014:1626", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2014-1626.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/HT204246"}, {"name": "APPLE-SA-2015-06-30-6", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/HT204243"}, {"name": "APPLE-SA-2015-01-27-2", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html"}, {"name": "APPLE-SA-2015-01-27-3", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00002.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT204949"}, {"name": "APPLE-SA-2015-01-27-1", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html"}, {"name": "70273", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/70273"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://crbug.com/403276"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@google.com", "ID": "CVE-2014-3192", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1031647", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1031647"}, {"name": "http://support.apple.com/HT204245", "refsource": "CONFIRM", "url": "http://support.apple.com/HT204245"}, {"name": "RHSA-2014:1626", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2014-1626.html"}, {"name": "http://support.apple.com/HT204246", "refsource": "CONFIRM", "url": "http://support.apple.com/HT204246"}, {"name": "APPLE-SA-2015-06-30-6", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html"}, {"name": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision", "refsource": "CONFIRM", "url": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision"}, {"name": "http://support.apple.com/HT204243", "refsource": "CONFIRM", "url": "http://support.apple.com/HT204243"}, {"name": "APPLE-SA-2015-01-27-2", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html"}, {"name": "APPLE-SA-2015-01-27-3", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00002.html"}, {"name": "https://support.apple.com/kb/HT204949", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT204949"}, {"name": "APPLE-SA-2015-01-27-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html"}, {"name": "70273", "refsource": "BID", "url": "http://www.securityfocus.com/bid/70273"}, {"name": "https://crbug.com/403276", "refsource": "CONFIRM", "url": "https://crbug.com/403276"}, {"name": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html", "refsource": "CONFIRM", "url": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T10:35:57.092Z"}, "title": "CVE Program Container", "references": [{"name": "1031647", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1031647"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/HT204245"}, {"name": "RHSA-2014:1626", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2014-1626.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/HT204246"}, {"name": "APPLE-SA-2015-06-30-6", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/HT204243"}, {"name": "APPLE-SA-2015-01-27-2", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html"}, {"name": "APPLE-SA-2015-01-27-3", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00002.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.apple.com/kb/HT204949"}, {"name": "APPLE-SA-2015-01-27-1", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html"}, {"name": "70273", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/70273"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://crbug.com/403276"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"}]}]}, "cveMetadata": {"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "assignerShortName": "Chrome", "cveId": "CVE-2014-3192", "datePublished": "2014-10-08T10:00:00.000Z", "dateReserved": "2014-05-03T00:00:00.000Z", "dateUpdated": "2024-08-06T10:35:57.092Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "chrome-cve-admin@google.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "B8C6E104-EDBC-481E-85B8-D39ED2058D39", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "4B74C62D-4A6D-4A4F-ADF6-A508322CD447", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*", "matchCriteriaId": "04A2B180-08EF-4BE1-B1F2-48782874D6DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "6E89B38A-3697-46DD-BB3F-E8D2373588BE", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED78BEDA-F401-4613-A58A-C5AED28F65E5", "versionEndIncluding": "12.1.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:safari:6.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "0713A1E7-ACB9-429A-BB6F-49BA6F4A9D89", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "AD636DF3-E590-4603-9D18-CC2375A97750", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6A5C7D83-EA9E-4E26-910D-8471252723EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "31944D25-25B6-4EA4-92B0-6B03921E0CCE", "versionEndIncluding": "8.1.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C32F3FB-EBDF-4A80-B7D9-42EDEF5DC6F4", "versionEndIncluding": "7.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "matchCriteriaId": "49217EEC-AE40-4FBD-A5D4-B4A323CD5645", "versionEndIncluding": "38.0.2125.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad de uso despu\u00e9s de liberaci\u00f3n en la funci\u00f3n ProcessingInstruction::setXSLStyleSheet en core/dom/ProcessingInstruction.cpp en la implementaci\u00f3n DOM en Blink, utilizado en Google Chrome anterior a 38.0.2125.101, permite a atacantes remotos causar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2014-3192", "lastModified": "2026-06-17T00:07:46.177", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-10-08T10:55:06.457", "references": [{"source": "chrome-cve-admin@google.com", "url": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00002.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://rhn.redhat.com/errata/RHSA-2014-1626.html"}, {"source": "chrome-cve-admin@google.com", "url": "http://support.apple.com/HT204243"}, {"source": "chrome-cve-admin@google.com", "url": "http://support.apple.com/HT204245"}, {"source": "chrome-cve-admin@google.com", "url": "http://support.apple.com/HT204246"}, {"source": "chrome-cve-admin@google.com", "url": "http://www.securityfocus.com/bid/70273"}, {"source": "chrome-cve-admin@google.com", "url": "http://www.securitytracker.com/id/1031647"}, {"source": "chrome-cve-admin@google.com", "url": "https://crbug.com/403276"}, {"source": "chrome-cve-admin@google.com", "url": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision"}, {"source": "chrome-cve-admin@google.com", "url": "https://support.apple.com/kb/HT204949"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2014-1626.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.apple.com/HT204243"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.apple.com/HT204245"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.apple.com/HT204246"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/70273"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1031647"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://crbug.com/403276"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://src.chromium.org/viewvc/blink?revision=182309&view=revision"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT204949"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2014:1626", "cpe": "cpe:/a:redhat:rhel_extras:6", "package": "chromium-browser-0:38.0.2125.101-2.el6_6", "product_name": "Supplementary for Red Hat Enterprise Linux 6", "release_date": "2014-10-14T00:00:00Z"}], "bugzilla": {"description": "chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101", "id": "1151395", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1151395"}, "csaw": false, "cvss": {"cvss_base_score": "6.8", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "status": "verified"}, "cwe": "CWE-416", "details": ["Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors."], "name": "CVE-2014-3192", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Will not fix", "impact": "moderate", "package_name": "webkitgtk", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "impact": "moderate", "package_name": "webkitgtk3", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2014-10-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2014-3192\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-3192\nhttp://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html"], "statement": "This issue affects the versions of webkitgtk and webkitgtk3 as shipped with Red Hat Enterprise Linux 6 and 7 respectively.\nRed Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "threat_severity": "Critical"}

{}