CVE-2014-3197
Fixed in a distro release EPSS 1%
The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.
Products: google chrome, redhat enterprise_linux_desktop_supplementary, redhat enterprise_linux_server_supplementary, redhat enterprise_linux_server_supplementary_eus, redhat enterprise_linux_workstation_supplementary
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | chromium-browser | 0:38.0.2125.101-2.el6_6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:38.0.2125.101-2.el6_6 |
| Ubuntu 14.04 LTS | oxide-qt | 1.2.5-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |