PT-2014-1112

CVE-2014-1748

·

Published

2014-05-20

·

Updated

2024-06-15

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 35.0.1916.114
Description The issue allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame. This is due to a problem in the ScrollView::paint function in Blink.
Recommendations For versions prior to 35.0.1916.114, update to version 35.0.1916.114 or later to resolve the issue.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2014-1955
ALT-PU-2016-1245
ALT-PU-2016-1315
DSA-2939-1
MGASA-2016-0120
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:10461-1
OPENSUSE-SU-2024:12948-1
USN-2298-1
USN-2937-1
Found an issue in the description? Have something to add? Feel free to write us 👾