CVE-2014-7942 The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified o...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chromium | = 40.0.2214.110 | No fix listed |
| redhat enterprise linux desktop supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary eus | = 6.6.z | No fix listed |
| redhat enterprise linux workstation supplementary | = 6.0 | No fix listed |
| Google Chrome | <= 40.0.2214.85 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:0441 vendor-advisory
- RHSA-2015:0093 vendor-advisory
- 62383 third-party-advisory
- 62575 third-party-advisory
- 62665 third-party-advisory
- GLSA-201502-13 vendor-advisory
- 72288 vdb-entry
- 1031623 vdb-entry
- USN-2476-1 vendor-advisory
- code.google.com