CVE-2014-3196 — Google Chrome vulnerability

CWE-2644 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 54.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedOct 8
Latest updateMay 17

Description

base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome38.0.2125.7

🔴Vulnerability Details

2
GHSA
GHSA-w95r-8w92-vggw: base/memory/shared_memory_win↗2022-05-17
▶
Project0
Did the “Man With No Name” Feel Insecure? - Project Zero↗2014-10-01
▶

💬Community

1
Bugzilla
MemMapSnapshot can be written by a malicious child process↗2019-07-13
▶