CVE-2014-3170

CVE-2014-3170 describes a vulnerability in Google Chrome versions prior to 37.0.2062.94, specifically within the extensions/common/url_pattern.cc component. This flaw allows remote attackers to spoof extension permission dialogs by embedding a null character ('\0') in a hostname, leading to truncation and misrepresentation of the URL. With a CVSS score of 6.4, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to partial compromise of confidentiality and integrity. While no active exploitation is noted and no public exploit code exists, the vulnerability garnered some community discussion and media coverage at the time of its disclosure.