CVE-2014-7942

EUVD-2014-7792
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
chromiumchromium
40.0.2214.110
redhatenterprise_linux_desktop_supplementary
6.0
redhatenterprise_linux_server_supplementary
6.0
redhatenterprise_linux_server_supplementary_eus
6.6.z:z
redhatenterprise_linux_workstation_supplementary
6.0
googlechrome
𝑥
≤ 40.0.2214.85
opensuseopensuse
13.1
opensuseopensuse
13.2
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
released
utopic
Fixed 40.0.2214.94-0ubuntu0.14.10.1.1110
released
vivid
Fixed 40.0.2214.94-0ubuntu1.1120
released
wily
Fixed 40.0.2214.94-0ubuntu1.1120
released
oxide-qt
lucid
dne
precise
dne
trusty
Fixed 1.4.2-0ubuntu0.14.04.1
released
utopic
Fixed 1.4.2-0ubuntu0.14.10.1
released
vivid
Fixed 1.4.2-0ubuntu1
released
wily
Fixed 1.4.2-0ubuntu1
released
Common Weakness Enumeration