ByteOS Network

CVE Vulnerability Details :

CVE-2014-1748

PUBLISHED

More Info Official Page

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At-21 May, 2014 | 10:00

Updated At-06 Aug, 2024 | 09:50

▼CVE Numbering Authority (CNA)

The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://code.google.com/p/chromium/issues/detail?id=331168	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2939	vendor-advisory x_refsource_DEBIAN
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html	x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-201408-16.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/60372	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/59155	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html	vendor-advisory x_refsource_SUSE
http://support.apple.com/kb/HT6596	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html	vendor-advisory x_refsource_APPLE
http://secunia.com/advisories/58920	third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id/1030270	vdb-entry x_refsource_SECTRACK
https://src.chromium.org/viewvc/blink?revision=170625&view=revision	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2937-1	vendor-advisory x_refsource_UBUNTU

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=331168

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2014/dsa-2939

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://security.gentoo.org/glsa/glsa-201408-16.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://secunia.com/advisories/60372

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/59155

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://support.apple.com/kb/HT6596

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://secunia.com/advisories/58920

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securitytracker.com/id/1030270

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://src.chromium.org/viewvc/blink?revision=170625&view=revision

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2937-1

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://code.google.com/p/chromium/issues/detail?id=331168	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2014/dsa-2939	vendor-advisory x_refsource_DEBIAN x_transferred
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html	x_refsource_CONFIRM x_transferred
http://security.gentoo.org/glsa/glsa-201408-16.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/60372	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/59155	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html	vendor-advisory x_refsource_SUSE x_transferred
http://support.apple.com/kb/HT6596	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/58920	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securitytracker.com/id/1030270	vdb-entry x_refsource_SECTRACK x_transferred
https://src.chromium.org/viewvc/blink?revision=170625&view=revision	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2937-1	vendor-advisory x_refsource_UBUNTU x_transferred

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=331168

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2014/dsa-2939

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201408-16.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://secunia.com/advisories/60372

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://secunia.com/advisories/59155

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://support.apple.com/kb/HT6596

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://secunia.com/advisories/58920

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securitytracker.com/id/1030270

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://src.chromium.org/viewvc/blink?revision=170625&view=revision

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2937-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References