Published: 22/01/2015 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Enterprise Linux Desktop Supplementary

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome prior to 40.0.2214.91, allows remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux desktop supplementary 6.0
redhat enterprise linux server supplementary 6.0
redhat enterprise linux workstation supplementary 6.0
redhat enterprise linux server supplementary eus 6.6.z
opensuse opensuse 13.1
opensuse opensuse 13.2
icu-project international components for unicode
oracle communications messaging server 7.0.5
oracle communications messaging server 8.0
canonical ubuntu linux 14.10
canonical ubuntu linux 14.04
google chrome

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic Updated chromium-browser packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having Important securityi ...

Debian Bug report logs - #776719 icu: CVE-2015-1205 / CVE-2014-9654 Package: src:icu; Maintainer for src:icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Sat, 31 Jan 2015 17:00:11 UTC Severity: serious Tags: patch, security Fixed in version icu/521-71 Done ...

Debian Bug report logs - #776264 icu: CVE-2014-6585 out-of-bounds read Package: src:icu; Maintainer for src:icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Mon, 26 Jan 2015 02:30:02 UTC Severity: important Tags: patch Found in version icu/521-7 Fixed in ver ...

Debian Bug report logs - #776265 icu: multiple security issues Package: src:icu; Maintainer for src:icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Mon, 26 Jan 2015 02:39:02 UTC Severity: important Tags: patch, security Found in version icu/521-7 Fixed in v ...

ICU could be made to crash or run programs as your login if it processed specially crafted data ...

Several security issues were fixed in Oxide ...

ICU could be made to crash or run programs as your login if it processed specially crafted data ...

USN-2522-1 introduced a regression in ICU ...

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 400221491, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression ...

CWE-17 http://secunia.com/advisories/62665 https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://googlechromereleases.blogspot.com/2015/01/stable-update.html http://secunia.com/advisories/62575 https://codereview.chromium.org/726973003 http://www.ubuntu.com/usn/USN-2476-1 http://www.securityfocus.com/bid/72288 https://code.google.com/p/chromium/issues/detail?id=430353 http://security.gentoo.org/glsa/glsa-201502-13.xml http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201503-06 http://www.securitytracker.com/id/1031623 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html http://advisories.mageia.org/MGASA-2015-0047.html http://bugs.icu-project.org/trac/ticket/11370 http://rhn.redhat.com/errata/RHSA-2015-0093.html http://secunia.com/advisories/62383 https://chromium.googlesource.com/chromium/deps/icu52/+/3af4ce5982311035e5f36803d547c0befa576c8c https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://access.redhat.com/errata/RHSA-2015:0093 https://nvd.nist.gov https://usn.ubuntu.com/2522-1/https://access.redhat.com/security/cve/cve-2014-7923

CVE-2014-7923

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect