SecuritySpace - CVE-2014-3197

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-3197

Description: The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-3197
BugTraq ID: 70273
http://www.securityfocus.com/bid/70273
RedHat Security Advisories: RHSA-2014:1626
http://rhn.redhat.com/errata/RHSA-2014-1626.html

CVE ID:	CVE-2014-3197
Description:	The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3197 BugTraq ID: 70273 http://www.securityfocus.com/bid/70273 RedHat Security Advisories: RHSA-2014:1626 http://rhn.redhat.com/errata/RHSA-2014-1626.html