Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-7925

Опубликовано: 22 янв. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5

Описание

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

РелизСтатусПримечание
devel

released

40.0.2214.94-0ubuntu1.1120
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [40.0.2214.94-0ubuntu0.14.04.1.1068]]
lucid

ignored

end of life
precise

ignored

trusty

released

40.0.2214.94-0ubuntu0.14.04.1.1068
trusty/esm

DNE

trusty was released [40.0.2214.94-0ubuntu0.14.04.1.1068]
upstream

released

40.0.2214.91
utopic

released

40.0.2214.94-0ubuntu0.14.10.1.1110
vivid

released

40.0.2214.94-0ubuntu1.1120
wily

released

40.0.2214.94-0ubuntu1.1120

Показывать по

РелизСтатусПримечание
devel

released

1.4.2-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1.4.2-0ubuntu0.14.04.1]]
lucid

DNE

precise

DNE

trusty

released

1.4.2-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1.4.2-0ubuntu0.14.04.1]
upstream

released

1.4.2
utopic

released

1.4.2-0ubuntu0.14.10.1
vivid

released

1.4.2-0ubuntu1
wily

released

1.4.2-0ubuntu1

Показывать по

EPSS

Процентиль: 87%
0.03194
Низкий

7.5 High

CVSS2

Связанные уязвимости

redhat
около 11 лет назад

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

nvd
около 11 лет назад

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

debian
около 11 лет назад

Use-after-free vulnerability in the WebAudio implementation in Blink, ...

github
больше 3 лет назад

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

EPSS

Процентиль: 87%
0.03194
Низкий

7.5 High

CVSS2