Description
The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2014-3741 | The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute. |
Ubuntu USN |
USN-2298-1 | Oxide vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T10:57:17.574Z
Reserved: 2014-05-21T00:00:00.000Z
Link: CVE-2014-3803
No data.
Status : Modified
Published: 2014-05-21T11:14:10.113
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-3803
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN