CVE-2014-7944

EUVD-2014-7794
The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 40.0.2214.85
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
released
utopic
Fixed 40.0.2214.94-0ubuntu0.14.10.1.1110
released
vivid
Fixed 40.0.2214.94-0ubuntu1.1120
released
wily
Fixed 40.0.2214.94-0ubuntu1.1120
released
oxide-qt
lucid
dne
precise
dne
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected