CVE-2014-3201

CVE-2014-3201 is a content spoofing vulnerability in the Blink rendering engine, specifically within core/rendering/compositing/RenderLayerCompositor.cpp, affecting Google Chrome on Android prior to version 38.0.2125.102. An attacker could exploit this by crafting a malicious website that interferes with scrollbar rendering in an IFRAME, allowing them to spoof content. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It requires no authentication (Au:N) and has low attack complexity (AC:L), meaning it can be exploited remotely over the network (AV:N) with relative ease. The primary impact is integrity (I:P), as it allows for content spoofing, but does not directly lead to confidentiality or availability compromise. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.