CVE-2014-7923

Redhat Enterprise Linux Desktop Supplementary - Denial of Service

Title source: rule
STIX 2.1

Description

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

References (20)

Core 20
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62665
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62575
Patch x_refsource_confirm
https://codereview.chromium.org/726973003
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2476-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/72288
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201502-13.xml
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201503-06
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031623
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2015-0047.html
Various Sources x_refsource_confirm
http://bugs.icu-project.org/trac/ticket/11370
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62383
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0093.html

Scores

EPSS 0.0256
EPSS Percentile 85.8%

Details

CWE
CWE-17
Status published
Products (12)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
google/chrome < 40.0.2214.85
icu-project/international_components_for_unicode < 55.1
opensuse/opensuse 13.1
opensuse/opensuse 13.2
oracle/communications_messaging_server 7.0.5
oracle/communications_messaging_server 8.0
redhat/enterprise_linux_desktop_supplementary 6.0
redhat/enterprise_linux_server_supplementary 6.0
... and 2 more
Published Jan 22, 2015
Tracked Since Feb 18, 2026