ByteOS Network

Source-chrome-cve-admin@google.com

Published At-21 May, 2014 | 11:14

Updated At-06 May, 2026 | 22:30

The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

Google LLC

>>chrome>>Versions up to 35.0.1916.113(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.0

cpe:2.3:a:google:chrome:35.0.1916.0:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.1

cpe:2.3:a:google:chrome:35.0.1916.1:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.2

cpe:2.3:a:google:chrome:35.0.1916.2:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.3

cpe:2.3:a:google:chrome:35.0.1916.3:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.4

cpe:2.3:a:google:chrome:35.0.1916.4:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.5

cpe:2.3:a:google:chrome:35.0.1916.5:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.6

cpe:2.3:a:google:chrome:35.0.1916.6:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.7

cpe:2.3:a:google:chrome:35.0.1916.7:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.8

cpe:2.3:a:google:chrome:35.0.1916.8:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.9

cpe:2.3:a:google:chrome:35.0.1916.9:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.10

cpe:2.3:a:google:chrome:35.0.1916.10:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.11

cpe:2.3:a:google:chrome:35.0.1916.11:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.13

cpe:2.3:a:google:chrome:35.0.1916.13:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.14

cpe:2.3:a:google:chrome:35.0.1916.14:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.15

cpe:2.3:a:google:chrome:35.0.1916.15:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.17

cpe:2.3:a:google:chrome:35.0.1916.17:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.18

cpe:2.3:a:google:chrome:35.0.1916.18:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.19

cpe:2.3:a:google:chrome:35.0.1916.19:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.20

cpe:2.3:a:google:chrome:35.0.1916.20:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.21

cpe:2.3:a:google:chrome:35.0.1916.21:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.22

cpe:2.3:a:google:chrome:35.0.1916.22:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.23

cpe:2.3:a:google:chrome:35.0.1916.23:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.27

cpe:2.3:a:google:chrome:35.0.1916.27:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.31

cpe:2.3:a:google:chrome:35.0.1916.31:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.32

cpe:2.3:a:google:chrome:35.0.1916.32:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.33

cpe:2.3:a:google:chrome:35.0.1916.33:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.34

cpe:2.3:a:google:chrome:35.0.1916.34:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.35

cpe:2.3:a:google:chrome:35.0.1916.35:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.36

cpe:2.3:a:google:chrome:35.0.1916.36:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.37

cpe:2.3:a:google:chrome:35.0.1916.37:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.38

cpe:2.3:a:google:chrome:35.0.1916.38:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.39

cpe:2.3:a:google:chrome:35.0.1916.39:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.40

cpe:2.3:a:google:chrome:35.0.1916.40:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.41

cpe:2.3:a:google:chrome:35.0.1916.41:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.42

cpe:2.3:a:google:chrome:35.0.1916.42:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.43

cpe:2.3:a:google:chrome:35.0.1916.43:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.44

cpe:2.3:a:google:chrome:35.0.1916.44:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.45

cpe:2.3:a:google:chrome:35.0.1916.45:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.46

cpe:2.3:a:google:chrome:35.0.1916.46:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.47

cpe:2.3:a:google:chrome:35.0.1916.47:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.48

cpe:2.3:a:google:chrome:35.0.1916.48:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.49

cpe:2.3:a:google:chrome:35.0.1916.49:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.51

cpe:2.3:a:google:chrome:35.0.1916.51:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.52

cpe:2.3:a:google:chrome:35.0.1916.52:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.54

cpe:2.3:a:google:chrome:35.0.1916.54:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.56

cpe:2.3:a:google:chrome:35.0.1916.56:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.57

cpe:2.3:a:google:chrome:35.0.1916.57:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.59

cpe:2.3:a:google:chrome:35.0.1916.59:*:*:*:*:*:*:*

Google LLC

>>chrome>>35.0.1916.61

cpe:2.3:a:google:chrome:35.0.1916.61:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html	chrome-cve-admin@google.com	N/A
http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/58920	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/59155	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/60372	chrome-cve-admin@google.com	N/A
http://security.gentoo.org/glsa/glsa-201408-16.xml	chrome-cve-admin@google.com	N/A
http://support.apple.com/kb/HT6596	chrome-cve-admin@google.com	N/A
http://www.debian.org/security/2014/dsa-2939	chrome-cve-admin@google.com	N/A
http://www.securitytracker.com/id/1030270	chrome-cve-admin@google.com	N/A
http://www.ubuntu.com/usn/USN-2937-1	chrome-cve-admin@google.com	N/A
https://code.google.com/p/chromium/issues/detail?id=331168	chrome-cve-admin@google.com	N/A
https://src.chromium.org/viewvc/blink?revision=170625&view=revision	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/58920	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/59155	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/60372	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201408-16.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT6596	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2014/dsa-2939	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1030270	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-2937-1	af854a3a-2127-422b-91ae-364da2661108	N/A
https://code.google.com/p/chromium/issues/detail?id=331168	af854a3a-2127-422b-91ae-364da2661108	N/A
https://src.chromium.org/viewvc/blink?revision=170625&view=revision	af854a3a-2127-422b-91ae-364da2661108	N/A