Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2014-7941

Published: 22/01/2015 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Chromium

Vulnerability Summary

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome prior to 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote malicious users to cause a denial of service (out-of-bounds read) via crafted X11 data.

Vulnerable Product Search on Vulmon Subscribe to Product

chromium chromium 40.0.2214.110

redhat enterprise linux desktop supplementary 6.0

redhat enterprise linux server supplementary 6.0

redhat enterprise linux workstation supplementary 6.0

redhat enterprise linux server supplementary eus 6.6.z

google chrome

opensuse opensuse 13.1

opensuse opensuse 13.2

Vendor Advisories

Red Hat: Important: chromium-browser security update
Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic Updated chromium-browser packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having Important securityi ...
Red Hat: CVE-2014-7941
The SelectionOwner::ProcessTarget function in ui/base/x/selection_ownercc in the UI implementation in Google Chrome before 400221491 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data ...

References

CWE-119http://secunia.com/advisories/62665http://googlechromereleases.blogspot.com/2015/01/stable-update.htmlhttp://www.securityfocus.com/bid/72288http://security.gentoo.org/glsa/glsa-201502-13.xmlhttps://code.google.com/p/chromium/issues/detail?id=428557http://www.securitytracker.com/id/1031623https://codereview.chromium.org/697863002http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0093.htmlhttp://secunia.com/advisories/62383https://access.redhat.com/errata/RHSA-2015:0093https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2014-7941
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook