Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-7909

Опубликовано: 18 нояб. 2014
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

Отчет

This issue did not affect the versions of librsvg2 as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5librsvg2Not affected
Red Hat Enterprise Linux 6librsvg2Not affected
Red Hat Enterprise Linux 7librsvg2Not affected
Supplementary for Red Hat Enterprise Linux 6chromium-browserFixedRHSA-2014:189424.11.2014

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1165660chromium-browser: Uninitialized memory read in Skia

EPSS

Процентиль: 82%
0.0166
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
около 11 лет назад

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

nvd
около 11 лет назад

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

debian
около 11 лет назад

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before ...

github
больше 3 лет назад

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

EPSS

Процентиль: 82%
0.0166
Низкий

6.8 Medium

CVSS2