CVE-2014-7930

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
googlechrome
𝑥
≤ 40.0.2214.85
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
wily
Fixed 40.0.2214.94-0ubuntu1.1120
released
vivid
Fixed 40.0.2214.94-0ubuntu1.1120
released
utopic
Fixed 40.0.2214.94-0ubuntu0.14.10.1.1110
released
trusty
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
released
precise
ignored
lucid
ignored
oxide-qt
wily
Fixed 1.4.2-0ubuntu1
released
vivid
Fixed 1.4.2-0ubuntu1
released
utopic
Fixed 1.4.2-0ubuntu0.14.10.1
released
trusty
Fixed 1.4.2-0ubuntu0.14.04.1
released
precise
dne
lucid
dne