CVE-2014-3172
EUVD-2014-319027.08.2014, 01:55
The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 37.0.2062.93 | |
| chrome | 37.0.2062.0 | |
| chrome | 37.0.2062.1 | |
| chrome | 37.0.2062.2 | |
| chrome | 37.0.2062.3 | |
| chrome | 37.0.2062.4 | |
| chrome | 37.0.2062.5 | |
| chrome | 37.0.2062.6 | |
| chrome | 37.0.2062.7 | |
| chrome | 37.0.2062.8 | |
| chrome | 37.0.2062.9 | |
| chrome | 37.0.2062.10 | |
| chrome | 37.0.2062.11 | |
| chrome | 37.0.2062.12 | |
| chrome | 37.0.2062.13 | |
| chrome | 37.0.2062.14 | |
| chrome | 37.0.2062.15 | |
| chrome | 37.0.2062.16 | |
| chrome | 37.0.2062.17 | |
| chrome | 37.0.2062.18 | |
| chrome | 37.0.2062.19 | |
| chrome | 37.0.2062.20 | |
| chrome | 37.0.2062.21 | |
| chrome | 37.0.2062.22 | |
| chrome | 37.0.2062.23 | |
| chrome | 37.0.2062.24 | |
| chrome | 37.0.2062.25 | |
| chrome | 37.0.2062.26 | |
| chrome | 37.0.2062.27 | |
| chrome | 37.0.2062.28 | |
| chrome | 37.0.2062.29 | |
| chrome | 37.0.2062.30 | |
| chrome | 37.0.2062.31 | |
| chrome | 37.0.2062.32 | |
| chrome | 37.0.2062.33 | |
| chrome | 37.0.2062.34 | |
| chrome | 37.0.2062.35 | |
| chrome | 37.0.2062.36 | |
| chrome | 37.0.2062.37 | |
| chrome | 37.0.2062.39 | |
| chrome | 37.0.2062.43 | |
| chrome | 37.0.2062.44 | |
| chrome | 37.0.2062.45 | |
| chrome | 37.0.2062.46 | |
| chrome | 37.0.2062.47 | |
| chrome | 37.0.2062.48 | |
| chrome | 37.0.2062.49 | |
| chrome | 37.0.2062.50 | |
| chrome | 37.0.2062.51 | |
| chrome | 37.0.2062.52 | |
| chrome | 37.0.2062.53 | |
| chrome | 37.0.2062.54 | |
| chrome | 37.0.2062.55 | |
| chrome | 37.0.2062.56 | |
| chrome | 37.0.2062.57 | |
| chrome | 37.0.2062.58 | |
| chrome | 37.0.2062.59 | |
| chrome | 37.0.2062.60 | |
| chrome | 37.0.2062.61 | |
| chrome | 37.0.2062.62 | |
| chrome | 37.0.2062.63 | |
| chrome | 37.0.2062.64 | |
| chrome | 37.0.2062.65 | |
| chrome | 37.0.2062.66 | |
| chrome | 37.0.2062.67 | |
| chrome | 37.0.2062.68 | |
| chrome | 37.0.2062.69 | |
| chrome | 37.0.2062.70 | |
| chrome | 37.0.2062.71 | |
| chrome | 37.0.2062.72 | |
| chrome | 37.0.2062.73 | |
| chrome | 37.0.2062.74 | |
| chrome | 37.0.2062.75 | |
| chrome | 37.0.2062.76 | |
| chrome | 37.0.2062.77 | |
| chrome | 37.0.2062.78 | |
| chrome | 37.0.2062.80 | |
| chrome | 37.0.2062.81 | |
| chrome | 37.0.2062.89 | |
| chrome | 37.0.2062.90 | |
| chrome | 37.0.2062.91 | |
| chrome | 37.0.2062.92 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References