CVE-2014-7940 — Google Chrome vulnerability

CWE-3999 documents8 sources
Severity
7.5HIGHNVD
EPSS
2.2%
top 15.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeIcu-project International Components FOR Unicode
Timeline
PublishedJan 22
Latest updateMay 14

Description

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

â–¶NVDgoogle/chrome40.0.2214.85

🔴Vulnerability Details

3
GHSA
GHSA-68vq-gw26-p643: The collator implementation in i18n/ucol↗2022-05-14
â–¶
CVEList
CVE-2014-7940: The collator implementation in i18n/ucol↗2015-01-22
â–¶
OSV
CVE-2014-7940: The collator implementation in i18n/ucol↗2015-01-22
â–¶

📋Vendor Advisories

4
Ubuntu
ICU vulnerabilities↗2015-03-05
â–¶
Ubuntu
Oxide vulnerabilities↗2015-01-26
â–¶
Red Hat
ICU: uninitialized value use in the collation component↗2015-01-21
â–¶
Debian
CVE-2014-7940: icu - The collator implementation in i18n/ucol.cpp in International Components for Uni...↗2014
â–¶

💬Community

1
Bugzilla
CVE-2014-7940 ICU: uninitialized value use in the collation component↗2015-01-23
â–¶
CVE-2014-7940 — Google Chrome vulnerability | cvebase