CoreCVE
Back

MEDIUM

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar

Published Oct 10, 2014

Description

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Oct 10, 2014
Updated Aug 6, 2024
Reserved May 3, 2014
Link CVE-2014-3201
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-3201
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-3201