CVE-2014-7923 The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of....
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/icu(Debian:12) | < 52.1-7.1 | 52.1-7.1 |
| debian/icu(Debian:13) | < 52.1-7.1 | 52.1-7.1 |
| debian/icu(Debian:14) | < 52.1-7.1 | 52.1-7.1 |
| redhat enterprise linux desktop supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary eus | = 6.6.z | No fix listed |
| redhat enterprise linux workstation supplementary | = 6.0 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| icu-project international components for unicode | < 55.1 | 55.1 |
| oracle communications messaging server | = 7.0.5 | No fix listed |
| oracle communications messaging server | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Google Chrome | <= 40.0.2214.85 | No fix listed |
References
- Debian Security Tracker CVE-2014-7923 vendor-advisory
- advisories.mageia.org
- bugs.icu-project.org
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:0441 vendor-advisory
- RHSA-2015:0093 vendor-advisory
- 62383 third-party-advisory
- 62575 third-party-advisory
- 62665 third-party-advisory
- GLSA-201502-13 vendor-advisory
- www.oracle.com
- www.oracle.com
- 72288 vdb-entry
- 1031623 vdb-entry
- USN-2476-1 vendor-advisory
- chromium.googlesource.com
- chromium.googlesource.com
- code.google.com
- codereview.chromium.org
- GLSA-201503-06 vendor-advisory
- www.oracle.com
- bugs.debian.org issue-tracking