--- title: "CVE-2014-3197\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-3197?format=md keywords: index, follow --- # CVE-2014-3197 Publication date 8 October 2014 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | chromium-browser | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Ignored end of life | | oxide-qt | 14.04 LTS trusty | Fixed 1.2.5-0ubuntu0.14.04.1 | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3197) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-3197) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-3197) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-3197) ### Related Ubuntu Security Notices (USN) + [USN-2345-1](https://usn.ubuntu.com/USN-2345-1) + Oxide vulnerabilities + 14 October 2014 ### Other references * * * *