CVE-2014-7928

EUVD-2014-7778
hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 40.0.2214.85
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
artful
Fixed 40.0.2214.94-0ubuntu1.1120
released
bionic
Fixed 40.0.2214.94-0ubuntu1.1120
released
cosmic
Fixed 40.0.2214.94-0ubuntu1.1120
released
lucid
ignored
precise
ignored
trusty
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
released
utopic
Fixed 40.0.2214.94-0ubuntu0.14.10.1.1110
released
vivid
Fixed 40.0.2214.94-0ubuntu1.1120
released
wily
Fixed 40.0.2214.94-0ubuntu1.1120
released
xenial
Fixed 40.0.2214.94-0ubuntu1.1120
released
yakkety
Fixed 40.0.2214.94-0ubuntu1.1120
released
zesty
Fixed 40.0.2214.94-0ubuntu1.1120
released
libv8-3.14
artful
ignored
bionic
ignored
cosmic
ignored
lucid
dne
precise
dne
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
ignored
yakkety
ignored
zesty
ignored
oxide-qt
artful
Fixed 1.4.2-0ubuntu1
released
bionic
dne
cosmic
dne
lucid
dne
precise
dne
trusty
Fixed 1.4.2-0ubuntu0.14.04.1
released
utopic
Fixed 1.4.2-0ubuntu0.14.10.1
released
vivid
Fixed 1.4.2-0ubuntu1
released
wily
Fixed 1.4.2-0ubuntu1
released
xenial
Fixed 1.4.2-0ubuntu1
released
yakkety
Fixed 1.4.2-0ubuntu1
released
zesty
Fixed 1.4.2-0ubuntu1
released
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
http://rhn.redhat.com/errata/RHSA-2015-0093.html
http://secunia.com/advisories/62383
http://secunia.com/advisories/62575
http://secunia.com/advisories/62665
http://security.gentoo.org/glsa/glsa-201502-13.xml
http://www.securityfocus.com/bid/72288
http://www.securitytracker.com/id/1031623
http://www.ubuntu.com/usn/USN-2476-1
https://code.google.com/p/chromium/issues/detail?id=435073
https://codereview.chromium.org/737383002
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
http://rhn.redhat.com/errata/RHSA-2015-0093.html
http://secunia.com/advisories/62383
http://secunia.com/advisories/62575
http://secunia.com/advisories/62665
http://security.gentoo.org/glsa/glsa-201502-13.xml
http://www.securityfocus.com/bid/72288
http://www.securitytracker.com/id/1031623
http://www.ubuntu.com/usn/USN-2476-1
https://code.google.com/p/chromium/issues/detail?id=435073
https://codereview.chromium.org/737383002