CVE-2014-3161 — Google Chrome vulnerability

CWE-2642 documents2 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 52.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedJul 20
Latest updateMay 17

Description

The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly interact with redirects, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that hosts a video stream.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome36.0.1985.106+99

🔴Vulnerability Details

1
GHSA
GHSA-59v8-q5hp-9q95: The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android↗2022-05-17
▶