CVE-2014-3193

EUVD-2014-3211
The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage "type confusion" for callback processing.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
redhatenterprise_linux_desktop_supplementary
6.0
redhatenterprise_linux_server_supplementary
6.0
redhatenterprise_linux_server_supplementary_eus
6.6.z:z
redhatenterprise_linux_workstation_supplementary
6.0
googlechrome
𝑥
≤ 38.0.2125.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 38.0.2125.111-0ubuntu0.14.04.1.1061
released
utopic
Fixed 38.0.2125.111-0ubuntu0.14.10.1.1103
released
vivid
Fixed 38.0.2125.111-0ubuntu1.1103
released
wily
Fixed 38.0.2125.111-0ubuntu1.1103
released
oxide-qt
lucid
dne
precise
dne
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected