What is CVE-2014-3201?

CVE-2014-3201 is a vulnerability in Google Chrome, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-10-10.

Is CVE-2014-3201 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Google Chrome

CVE-2014-3201

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.

Vulnerability class: Buffer Overflow

EPSS: 0.008 (51.9th percentile) — read the EPSS interpretation.

Affected products

Google Chrome
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

BushraAloraini/Android-Vulnerabilities

References

chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2014-3201?: CVE-2014-3201 is a vulnerability in Google Chrome, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-10-10.
Is CVE-2014-3201 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.