CVE-2014-7943 Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| redhat enterprise linux desktop supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary eus | = 6.6.z | No fix listed |
| redhat enterprise linux workstation supplementary | = 6.0 | No fix listed |
| chromium | = 40.0.2214.110 | No fix listed |
| Google Chrome | <= 40.0.2214.85 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:0441 vendor-advisory
- RHSA-2015:0093 vendor-advisory
- 62383 third-party-advisory
- 62575 third-party-advisory
- 62665 third-party-advisory
- GLSA-201502-13 vendor-advisory
- 72288 vdb-entry
- 1031623 vdb-entry
- USN-2476-1 vendor-advisory
- code.google.com