CVE-2014-7926

CWE-17CWE-787 — Out-of-bounds Write14 documents8 sources
Severity
7.5HIGH
EPSS
2.3%
top 15.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Icu-project International Components FOR UnicodeGoogle ChromeCanonical Ubuntu Linux+6 more
Timeline
PublishedJan 22
Latest updateMay 14

Description

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages8 packages

▶NVDgoogle/chrome40.0.2214.85
▶Debianicu< 52.1-7.1+3
▶Ubuntuoxide-qt< 1.4.2-0ubuntu0.14.04.1
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Ubuntu Linux 14.04, 14.10, Enterprise Linux 6.0, 6.6.z

🔴Vulnerability Details

4
GHSA
GHSA-vf27-fm4x-9fp4: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40↗2022-05-14
▶
OSV
oxide-qt vulnerabilities↗2015-01-26
▶
OSV
CVE-2014-7926: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40↗2015-01-22
▶
CVEList
CVE-2014-7926: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40↗2015-01-22
▶

📋Vendor Advisories

4
Ubuntu
ICU vulnerabilities↗2015-03-05
▶
Ubuntu
Oxide vulnerabilities↗2015-01-26
▶
Red Hat
ICU: regexp engine incorrect handling of a zero length quantifier↗2015-01-21
▶
Debian
CVE-2014-7926: icu - The Regular Expressions package in International Components for Unicode (ICU) 52...↗2014
▶

💬Community

4
Bugzilla
CVE-2014-7926 CVE-2014-9654 CVE-2014-7923 mingw-icu: various flaws [epel-7]↗2015-02-06
▶
Bugzilla
CVE-2014-7926 CVE-2014-9654 CVE-2014-7923 icu: various flaws [fedora-all]↗2015-02-06
▶
Bugzilla
CVE-2014-7926 CVE-2014-9654 CVE-2014-7923 mingw-icu: various flaws [fedora-all]↗2015-02-06
▶
Bugzilla
CVE-2014-7926 ICU: regexp engine incorrect handling of a zero length quantifier↗2015-01-23
▶
CVE-2014-7926 (HIGH CVSS 7.5) | The Regular Expressions package in | cvebase.io