{"api_version":"1","generated_at":"2026-07-23T08:14:25+00:00","cve":"CVE-2014-3187","urls":{"html":"https://cve.report/CVE-2014-3187","api":"https://cve.report/api/cve/CVE-2014-3187.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-3187","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3187"},"summary":{"title":"CVE-2014-3187","description":"Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.","state":"PUBLISHED","assigner":"Chrome","published_at":"2014-10-08 10:55:05","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://twitter.com/S9Labs/statuses/519576582742999043","name":"http://twitter.com/S9Labs/statuses/519576582742999043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Section 9 Labs on Twitter: \"Time to update your Google Chrome in iOS if you haven't done it already. http://t.co/Jsys6xd1OT  https://t.co/wLukkmiKpl\"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://code.google.com/p/chromium/issues/detail?id=413831","name":"https://code.google.com/p/chromium/issues/detail?id=413831","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Issue 413831 - \n chromium -\n \n Security: Issue with facetime:// and facetime-audio:// schemes - \n An open-source project to help move the web forward. - Google Project Hosting","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5","name":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Abusing iOS url handlers on Messages — Section 9 Lab — Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html","name":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Chrome Releases: Chrome for iOS Update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3187","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3187","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"iphone_os","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.44","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.46","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.47","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.48","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.49","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.52","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.53","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.54","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.55","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.56","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.57","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.58","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"37.0.2062.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"38.0.2125.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3187","vulnerable":"1","versionEndIncluding":"37.0.2062.59","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:35:57.015Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://code.google.com/p/chromium/issues/detail?id=413831"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://twitter.com/S9Labs/statuses/519576582742999043"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-10-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-10-08T08:57:00.000Z","orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://code.google.com/p/chromium/issues/detail?id=413831"},{"tags":["x_refsource_MISC"],"url":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5"},{"tags":["x_refsource_CONFIRM"],"url":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html"},{"tags":["x_refsource_MISC"],"url":"http://twitter.com/S9Labs/statuses/519576582742999043"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@google.com","ID":"CVE-2014-3187","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://code.google.com/p/chromium/issues/detail?id=413831","refsource":"CONFIRM","url":"https://code.google.com/p/chromium/issues/detail?id=413831"},{"name":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5","refsource":"MISC","url":"https://medium.com/section-9-lab/abusing-ios-url-handlers-on-messages-96979e8b12f5"},{"name":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html","refsource":"CONFIRM","url":"http://googlechromereleases.blogspot.com/2014/10/chrome-for-ios-update.html"},{"name":"http://twitter.com/S9Labs/statuses/519576582742999043","refsource":"MISC","url":"http://twitter.com/S9Labs/statuses/519576582742999043"}]}}}},"cveMetadata":{"assignerOrgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","assignerShortName":"Chrome","cveId":"CVE-2014-3187","datePublished":"2014-10-08T10:00:00.000Z","dateReserved":"2014-05-03T00:00:00.000Z","dateUpdated":"2024-08-06T10:35:57.015Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-10-08 10:55:05","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"37.0.2062.59","matchCriteriaId":"240B58E9-8B2A-4912-9AE1-88A514824396"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:*","matchCriteriaId":"0F701378-3B81-41AB-82E6-C271B64B325B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:*","matchCriteriaId":"D53BE304-211A-404B-B800-6ECB66FC95AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:*","matchCriteriaId":"2F8902F1-31DE-4618-BC6A-2CEB77CE0CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:*","matchCriteriaId":"03C82FB7-E434-4FE5-8BBE-2813B640A338"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:*","matchCriteriaId":"1C991A75-80C8-4BCC-A837-B8AE12EB08FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:*","matchCriteriaId":"2FAA26AE-CB14-4139-967A-2455DDFE988D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:*","matchCriteriaId":"1EECB924-BB97-4AF5-A47F-9037749FB1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:*","matchCriteriaId":"DF0BA783-86BA-4678-913D-80EDF56992A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:*","matchCriteriaId":"B1372534-A736-4538-AA7E-CFC08DC056DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:*","matchCriteriaId":"A34F1468-0C18-4B01-BA36-AADD8A7ADC2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:*","matchCriteriaId":"306639CB-9CA3-4D05-B388-580CB482F039"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:*","matchCriteriaId":"4D9CD009-556D-4E6F-964F-7CB01E4E5161"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:*","matchCriteriaId":"E6EF83C7-EF96-4523-8249-B61B9243A543"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:*","matchCriteriaId":"354673A9-5100-46CE-AB62-C1BD06EA4876"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:*","matchCriteriaId":"A5B4C2E7-0AED-4622-B569-D4FBDF431571"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:*","matchCriteriaId":"8AB97059-5536-4565-B021-30B03FA6700F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:*","matchCriteriaId":"8EA6B745-1329-4D99-8ACE-14438BD36B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:*","matchCriteriaId":"B6A8C84C-B5FF-4722-BBEA-9705AC93B8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:*","matchCriteriaId":"84EA8B73-D8EB-4171-81DD-146A96EDF22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:*","matchCriteriaId":"4DD2E887-0B9D-4C67-B116-BEB5D7256682"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:*","matchCriteriaId":"3E11F118-6BE5-4F76-9B56-88F6981C0A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:*","matchCriteriaId":"6C8F4B1B-930D-4B2F-AEBD-5B86086ABC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:*","matchCriteriaId":"E4BBA599-AA08-4B85-B72C-5E11F9D019E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:*","matchCriteriaId":"BFA810CC-6DE3-4CE8-A492-6986BD17BE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:*","matchCriteriaId":"3CE81439-8B09-4106-9523-F43C0B541A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:*","matchCriteriaId":"208619F0-CFE0-41C4-9C5B-B2EAF6B389BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:*","matchCriteriaId":"5E862A55-8795-4BB5-870F-E38DBC5FABC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:*","matchCriteriaId":"FEFBC1F1-291C-42B1-9DD4-36B04A9B97AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:*","matchCriteriaId":"7C283142-1633-4C59-BB2C-8E085B8D2709"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:*","matchCriteriaId":"F2286AE1-8D20-494C-A4DF-1C70C086D5F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:*","matchCriteriaId":"E7DE2B94-D778-46C9-A62F-69755BA2BCF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:*","matchCriteriaId":"4467FA75-AAD4-4290-9142-0F104DF9FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:*","matchCriteriaId":"73655CAB-70EA-4803-8759-589FE48A85E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:*","matchCriteriaId":"F3B05E8A-91D5-4B18-92EF-753BF4AD5903"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:*","matchCriteriaId":"59E5F85D-4A69-4446-ACED-B0EFF6C163BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:*","matchCriteriaId":"9F6109DC-D7BA-4143-9627-F786AF1B0160"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:*","matchCriteriaId":"0D4A1AF1-4677-47B4-BA5E-538895F206B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:*","matchCriteriaId":"340B17EA-7026-46A9-84C3-26EAC4CE9B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:*","matchCriteriaId":"79AA77B6-BF3E-425F-8F07-A5BB8E030C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:*","matchCriteriaId":"B37F78D0-E7AB-406C-9A97-0600D5AD19AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:*","matchCriteriaId":"EE4DB73C-B60E-4630-9CE5-99408C1FB4DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:*","matchCriteriaId":"2622DAA5-406F-4FC4-8D6F-97759DF6BD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:*","matchCriteriaId":"8E5A596B-6184-453E-8450-F8A057C1D50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:*","matchCriteriaId":"D00A3638-7D95-4E90-9DA7-82C2F917C57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:*","matchCriteriaId":"45BC22F7-65EC-4CAA-ABD4-1C39C8084E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:*","matchCriteriaId":"245147AE-43A2-45C8-8179-25948F630B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:*","matchCriteriaId":"439343BC-5EAD-4150-ABDC-B9A6714B29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:*","matchCriteriaId":"10988982-6718-48B2-BCF8-370E26435A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:*","matchCriteriaId":"69A7A23A-013A-4AF2-B5FD-07FE36DDF9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:*","matchCriteriaId":"9D8D4586-C566-49BC-8942-DAA852CD1050"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:*","matchCriteriaId":"F333616F-1BBB-4A8C-89E3-FF46740385F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:*","matchCriteriaId":"C0ABB09E-A89C-47E0-BDF8-59C9DDFB328E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:38.0.2125.7:*:*:*:*:*:*:*","matchCriteriaId":"A5C5B6A9-2EC5-4C88-80B2-DAD713FA8A8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*","matchCriteriaId":"B5415705-33E5-46D5-8E4D-9EBADC8C5705"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"3187","Ordinal":"1","Title":"CVE-2014-3187","CVE":"CVE-2014-3187","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"3187","Ordinal":"1","NoteData":"Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.","Type":"Description","Title":"CVE-2014-3187"},{"CveYear":"2014","CveId":"3187","Ordinal":"2","NoteData":"2014-10-08","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"3187","Ordinal":"3","NoteData":"2014-10-08","Type":"Other","Title":"Modified"}]}}}