deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3642
Published: 2014-10-06
Description: vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an "insecure send method."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-1317.html; https://bugzilla.redhat.com/show_bug.cgi?id=1092894; http://rhn.redhat.com/errata/RHSA-2014-1317.html
CVE: CVE-2014-3657
Published: 2014-10-06
Description: The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=fc22b2e[PII_REDACTED]8b43fffae43025d22053669; http://lists.opensuse.org/opensuse-updates/2014-10/msg00014.html; http://lists.opensuse.org/opensuse-updates/2014-10/msg00017.html
CVE: CVE-2014-5389
Published: 2014-10-06
Description: SQL injection vulnerability in content-audit-schedule.php in the Content Audit plugin before 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "Audited content types" option in the content-audit page to wp-admin/options-general.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/128525/WordPress-Content-Audit-1.6-Blind-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Oct/8; http://www.securityfocus.com/bid/70214
CVE: CVE-2014-6054
Published: 2014-10-06
Description: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html; http://seclists.org/oss-sec/2014/q3/639; http://secunia.com/advisories/61506
CVE: CVE-2014-7869
Published: 2014-10-06
Description: Cross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/58307; http://www.securityfocus.com/bid/67173; https://www.drupal.org/node/2253103
CVE: CVE-2014-7870
Published: 2014-10-06
Description: Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to admin/config/search/custom_search/results.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Apr/41; https://www.drupal.org/node/2231531; https://www.drupal.org/node/2231533
CVE: CVE-2013-1436
Published: 2014-10-06
Description: The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://handra.rampa.sk/dawb/patch?repoPURL=http%3A%2F%2Fcode.haskell.org%2FXMonadContrib&repoPHash=[PII_REDACTED]4813-1499c-0c3e284d3523c0694b[PII_REDACTED]761813bc1e89; http://security.gentoo.org/glsa/glsa-201405-28.xml; http://www.openwall.com/lists/oss-security/2013/07/26/5
CVE: CVE-2013-7329
Published: 2014-10-06
Description: The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attackers to obtain sensitive information (web queries and environment details) via vectors related to the dump_html function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129436.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129444.html; http://openwall.com/lists/oss-security/2014/02/19/11
CVE: CVE-2014-0397
Published: 2014-10-06
Description: Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified impact and attack vectors related to "Buffer errors."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/65819; https://blogs.oracle.com/sunsecurity/entry/cve_2014_0397_buffer_errors; https://exchange.xforce.ibmcloud.com/vulnerabilities/91482
CVE: CVE-2014-1224
Published: 2014-10-06
Description: Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2014/Mar/389; http://secunia.com/advisories/56310; http://www.securityfocus.com/archive/1/531654/100/0/threaded
CVE: CVE-2014-1868
Published: 2014-10-06
Description: Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via an XML Entity Expansion (XEE) attack.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/56940; https://exchange.xforce.ibmcloud.com/vulnerabilities/91181; https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancements
CVE: CVE-2014-1875
Published: 2014-10-06
Description: The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes; http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128823.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128882.html
CVE: CVE-2014-2044
Published: 2014-10-06
Description: Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/125585/ownCloud-4.0.x-4.5.x-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2014/Mar/45; http://secunia.com/advisories/57267
CVE: CVE-2014-4043
Published: 2014-10-06
Description: The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00012.html; http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE: CVE-2014-4510
Published: 2014-10-06
Description: Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://anonscm.debian.org/cgit/apt-cacher-ng/apt-cacher-ng.git/diff/?id=6f08e6a3995d1bed4e837889a3945b6dc650f6ad; http://seclists.org/oss-sec/2014/q2/602; http://seclists.org/oss-sec/2014/q2/603
CVE: CVE-2014-6389
Published: 2014-10-06
Description: backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the d parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/128526/PHPCompta-NOALYSS-6.7.1-5638-Remote-Command-Execution.html; http://seclists.org/fulldisclosure/2014/Oct/7; http://www.exploit-db.com/exploits/34861
CVE: CVE-2014-6409
Published: 2014-10-06
Description: Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password parameters to /admin/users/update.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/128321/M-Monit-3.2.2-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2014/Sep/71; http://www.exploit-db.com/exploits/34718
CVE: CVE-2014-6607
Published: 2014-10-06
Description: M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/128321/M-Monit-3.2.2-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2014/Sep/71; http://www.exploit-db.com/exploits/34718
CVE: CVE-2014-0940
Published: 2014-10-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530; http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175; http://www-01.ibm.com/support/docview.wss?uid=swg21686189
CVE: CVE-2014-3399
Published: 2014-10-07
Description: The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and consequently cause a denial of service (portal outage or system reload), via crafted HTTP requests, aka Bug ID CSCup54208.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-94
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399; http://tools.cisco.com/security/center/viewAlert.x?alertId=35989; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399
CVE: CVE-2014-4802
Published: 2014-10-07
Description: The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager (BPM) 8.0 through 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtain sensitive information by executing a saved search.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR50984; http://www-01.ibm.com/support/docview.wss?uid=swg21684771; https://exchange.xforce.ibmcloud.com/vulnerabilities/95304
CVE: CVE-2014-4868
Published: 2014-10-07
Description: The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://www.kb.cert.org/vuls/id/111588; http://www.kb.cert.org/vuls/id/111588
CVE: CVE-2014-4869
Published: 2014-10-07
Description: The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/111588; http://www.kb.cert.org/vuls/id/111588
CVE: CVE-2014-4870
Published: 2014-10-07
Description: /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/111588; http://www.kb.cert.org/vuls/id/111588
CVE: CVE-2014-4871
Published: 2014-10-07
Description: Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/941108; http://www.securityfocus.com/bid/70253; http://www.kb.cert.org/vuls/id/941108
CVE: CVE-2014-6287
Published: 2014-10-07
Description: The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html; http://packetstormsecurity.com/files/135122/Rejetto-HTTP-File-Server-2.3.x-Remote-Code-Execution.html; http://packetstormsecurity.com/files/160264/Rejetto-HttpFileServer-2.3.x-Remote-Command-Execution.html
CVE: CVE-2014-3565
Published: 2014-10-07
Description: snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://lists.opensuse.org/opensuse-updates/2014-09/msg00013.html; http://rhn.redhat.com/errata/RHSA-2015-1385.html
CVE: CVE-2014-3632
Published: 2014-10-07
Description: The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file.  NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-1339.html; http://rhn.redhat.com/errata/RHSA-2014-1339.html
CVE: CVE-2014-5501
Published: 2014-10-07
Description: Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://kb.cyberoam.com/default.asp?id=3049; http://www.zerodayinitiative.com/advisories/ZDI-14-334/; http://kb.cyberoam.com/default.asp?id=3049
CVE: CVE-2014-5502
Published: 2014-10-07
Description: The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://kb.cyberoam.com/default.asp?id=3049; http://www.zerodayinitiative.com/advisories/ZDI-14-328/; http://www.zerodayinitiative.com/advisories/ZDI-14-331/
CVE: CVE-2014-5503
Published: 2014-10-07
Description: SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.
CVSS Score: 10.0 (HIGH)
CWE: CWE-89
References: http://kb.cyberoam.com/default.asp?id=3049; http://www.zerodayinitiative.com/advisories/ZDI-14-329/; http://kb.cyberoam.com/default.asp?id=3049
CVE: CVE-2014-6433
Published: 2014-10-07
Description: gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.zerodayinitiative.com/advisories/ZDI-14-347/; http://www.zerodayinitiative.com/advisories/ZDI-14-347/
CVE: CVE-2014-6434
Published: 2014-10-07
Description: gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.zerodayinitiative.com/advisories/ZDI-14-348/; http://www.zerodayinitiative.com/advisories/ZDI-14-348/
CVE: CVE-2014-6603
Published: 2014-10-07
Description: The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139630.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139821.html; http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html
CVE: CVE-2014-7189
Published: 2014-10-07
Description: crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2014/09/26/28; http://www.securityfocus.com/bid/70156; https://exchange.xforce.ibmcloud.com/vulnerabilities/96693
CVE: CVE-2014-7204
Published: 2014-10-07
Description: jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://advisories.mageia.org/MGASA-2014-0415.html; http://sourceforge.net/p/ctags/code/791/; http://www.debian.org/security/2014/dsa-3042
CVE: CVE-2014-7235
Published: 2014-10-07
Description: htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth cookie, related to the PHP unserialize function, as exploited in the wild in September 2014.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://community.freepbx.org/t/critical-freepbx-rce-vulnerability-all-versions-cve-2014-7235/24536; http://packetstormsecurity.com/files/128516/FreePBX-Authentication-Bypass-Account-Creation.html; http://secunia.com/advisories/61601
CVE: CVE-2014-7295
Published: 2014-10-07
Description: The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://seclists.org/oss-sec/2014/q4/67; http://secunia.com/advisories/61752; http://www.debian.org/security/2014/dsa-3046
CVE: CVE-2014-7273
Published: 2014-10-08
Description: The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html; http://openwall.com/lists/oss-security/2014/10/07/33; http://pyropus.ca/software/getmail/CHANGELOG
CVE: CVE-2014-7274
Published: 2014-10-08
Description: The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate from a recognized Certification Authority.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html; http://openwall.com/lists/oss-security/2014/10/07/33; http://pyropus.ca/software/getmail/CHANGELOG
CVE: CVE-2014-7275
Published: 2014-10-08
Description: The POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof POP3 servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html; http://openwall.com/lists/oss-security/2014/10/07/33; http://pyropus.ca/software/getmail/CHANGELOG
CVE: CVE-2014-7299
Published: 2014-10-08
Description: Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session.
CVSS Score: 7.5 (HIGH)
References: http://www.arubanetworks.com/support/alerts/aid-10072014.txt; http://www.arubanetworks.com/support/alerts/aid-10072014.txt
CVE: CVE-2014-3187
Published: 2014-10-08
Description: Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html; http://twitter.com/S9Labs/statuses/[PII_REDACTED]42999043; https://code.google.com/p/chromium/issues/detail?id=413831
CVE: CVE-2014-3188
Published: 2014-10-08
Description: Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://googlechromereleases.blogspot.com/2014/10/stable-channel-update-for-chrome-os.html; http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html; http://rhn.redhat.com/errata/RHSA-2014-1626.html
CVE: CVE-2014-3189
Published: 2014-10-08
Description: The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html; http://rhn.redhat.com/errata/RHSA-2014-1626.html; http://www.securityfocus.com/bid/70273
CVE: CVE-2014-3190
Published: 2014-10-08
Description: Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html; http://rhn.redhat.com/errata/RHSA-2014-1626.html; http://www.securityfocus.com/bid/70273