CVE-2014-1748
Description
The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.
Risk Information
Base Score
6.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.732
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Updates for Google Chrome (66.0.3359.170) | Windows |
| Updates for Google Chrome (x64) (66.0.3359.170) | Windows |
| Updates for Google Chrome (66.0.3359.181) | Windows |
| Updates for Google Chrome (x64) (66.0.3359.181) | Windows |
| Updates for Google Chrome (67.0.3396.62) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.62) | Windows |
| Updates for Google Chrome (67.0.3396.79) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.79) | Windows |
| Updates for Google Chrome (67.0.3396.87) | Windows |
| Updates for Google Chrome (x64) (67.0.3396.87) | Windows |
| Google Chrome (67.0.3396.99) | Windows |
| Google Chrome (x64) (67.0.3396.99) | Windows |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 | Windows |
| Multiple vulnerabilities fixed in Chrome (x64) 35.0.1916.114 | Windows |
| Multiple vulnerabilities are fixed in Google Chrome for Mac 35.0.1916.114 | Mac |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-1.0-0_2.4.10-0ubuntu0.14.04.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-1.0-0_2.4.10-0ubuntu0.14.04.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-1.0-0_2.4.10-0ubuntu0.15.10.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-1.0-0_2.4.10-0ubuntu0.15.10.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-3.0-0_2.4.10-0ubuntu0.14.04.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-3.0-0_2.4.10-0ubuntu0.14.04.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-3.0-0_2.4.10-0ubuntu0.15.10.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libwebkitgtk-3.0-0_2.4.10-0ubuntu0.15.10.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-1.0-0_2.4.10-0ubuntu0.14.04.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-1.0-0_2.4.10-0ubuntu0.14.04.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-1.0-0_2.4.10-0ubuntu0.15.10.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-1.0-0_2.4.10-0ubuntu0.15.10.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-3.0-0_2.4.10-0ubuntu0.14.04.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-3.0-0_2.4.10-0ubuntu0.14.04.1_amd64.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-3.0-0_2.4.10-0ubuntu0.15.10.1_i386.deb | Linux |
| Web content engine library for GTK+ (USN-2937-1) libjavascriptcoregtk-3.0-0_2.4.10-0ubuntu0.15.10.1_amd64.deb | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Ubuntu) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Debian) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Debian) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Debian) | Linux |
| Google Chrome (67.0.3396.99) (For Debian) | Linux |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 (For Debian) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Centos) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Centos) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Centos) | Linux |
| Google Chrome (67.0.3396.99) (For Centos) | Linux |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 (For Centos) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For RedHat) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For RedHat) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For RedHat) | Linux |
| Google Chrome (67.0.3396.99) (For RedHat) | Linux |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 (For RedHat) | Linux |
| Updates for Google Chrome (66.0.3359.170) (For Suse) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Suse) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Suse) | Linux |
| Google Chrome (67.0.3396.99) (For Suse) | Linux |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 (For Suse) | Linux |
| Updates for Google Chrome (66.0.3359.181) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.62) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.79) (For Ubuntu) | Linux |
| Updates for Google Chrome (67.0.3396.87) (For Ubuntu) | Linux |
| Google Chrome (67.0.3396.99) (For Ubuntu) | Linux |
| Multiple vulnerabilities fixed in Chrome 35.0.1916.114 (For Ubuntu) | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-307513 | Updates for Google Chrome (66.0.3359.170) |
| PATCH-307515 | Updates for Google Chrome (x64) (66.0.3359.170) |
| PATCH-307534 | Updates for Google Chrome (66.0.3359.181) |
| PATCH-307535 | Updates for Google Chrome (x64) (66.0.3359.181) |
| PATCH-307607 | Updates for Google Chrome (67.0.3396.62) |
| PATCH-307608 | Updates for Google Chrome (x64) (67.0.3396.62) |
| PATCH-307641 | Updates for Google Chrome (67.0.3396.79) |
| PATCH-307644 | Updates for Google Chrome (x64) (67.0.3396.79) |
| PATCH-307660 | Updates for Google Chrome (67.0.3396.87) |
| PATCH-307662 | Updates for Google Chrome (x64) (67.0.3396.87) |
| PATCH-307715 | Google Chrome (67.0.3396.99) |
| PATCH-307716 | Google Chrome (x64) (67.0.3396.99) |
| PATCH-313038 | Google Chrome (80.0.3987.122) |
| PATCH-313039 | Google Chrome (x64) (80.0.3987.122) |
| PATCH-611995 | Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234