Security Advisory

CVE-2014-3187

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-10-08 10:00:00
Last updated 2024-08-06 10:35:57
Assigner Chrome
State PUBLISHED

Description

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.