CVE-2014-7906
published 2014-11-19CVE-2014-7906: Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have…
PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.95%
78.2th percentile
Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 39.0.2171.45 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rff6-5r42-5rpm: Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39
ghsa_unreviewed·2022-05-17
CVE-2014-7906 [HIGH] GHSA-rff6-5r42-5rpm: Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39
Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.
Red Hat
chromium-browser: Use-after-free in pepper plugins
vendor_redhat·2014-11-18·CVSS 7.5
CVE-2014-7906 [HIGH] CWE-416 chromium-browser: Use-after-free in pepper plugins
chromium-browser: Use-after-free in pepper plugins
Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.
No detection rules found.
No public exploits indexed.
http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1894.htmlhttp://secunia.com/advisories/60194http://www.securityfocus.com/bid/71159http://www.securitytracker.com/id/1031241https://chromium.googlesource.com/chromium/src/+/3a2cf7d1376ae33054b878232fb38b8fbed29e31https://code.google.com/p/chromium/issues/detail?id=423030https://exchange.xforce.ibmcloud.com/vulnerabilities/98794http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1894.htmlhttp://secunia.com/advisories/60194http://www.securityfocus.com/bid/71159http://www.securitytracker.com/id/1031241https://chromium.googlesource.com/chromium/src/+/3a2cf7d1376ae33054b878232fb38b8fbed29e31https://code.google.com/p/chromium/issues/detail?id=423030https://exchange.xforce.ibmcloud.com/vulnerabilities/98794
2014-11-19
Published