CVE:CVE-2014-7939
CNNVD:CNNVD-201501-578
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Google V8是其中的一套开源JavaScript引擎。
Google Chrome 40.0.2214.91之前版本的Google V8中存在安全漏洞。当程序启用Harmony代理时，远程攻击者可借助带有Proxy.create和console.log调用的特制的JavaScript代码利用该漏洞绕过同源策略。
solution:Upgrade google chrome to a higher version than 40.0.2214.85,and avoid the version (,40.0.2214.85]; Upgrade chromium chromium to a higher version than 40.0.2214.110,and avoid the version 40.0.2214.110; Upgrade redhat enterprise_linux_desktop_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.6.z,and avoid the version 6.6.z; Upgrade redhat enterprise_linux_workstation_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2