5
CVE-2014-7943
- EPSS 1.61%
- Veröffentlicht 22.01.2015 22:59:23
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
Redhat ≫ Enterprise Linux Desktop Supplementary Version 6.0
Redhat ≫ Enterprise Linux Server Supplementary Version 6.0
Redhat ≫ Enterprise Linux Server Supplementary Eus Version 6.6.z
Redhat ≫ Enterprise Linux Workstation Supplementary Version 6.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.61% | 0.727 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
http://rhn.redhat.com/errata/RHSA-2015-0093.html
http://secunia.com/advisories/62383
http://secunia.com/advisories/62575
http://secunia.com/advisories/62665
http://security.gentoo.org/glsa/glsa-201502-13.xml
http://www.securityfocus.com/bid/72288
http://www.securitytracker.com/id/1031623
http://www.ubuntu.com/usn/USN-2476-1
https://code.google.com/p/chromium/issues/detail?id=422492