CVE-2014-3170

extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to…

published August 27, 2014

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01797 · 78.1th percentile
Published
2014-08-27T01:00Z
EPSS history
Timeline
  • 27 AUG 01:00Z
    extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to…
    cvelistv5