Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-7947

Опубликовано: 22 янв. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5

Описание

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.

РелизСтатусПримечание
artful

released

40.0.2214.94-0ubuntu1.1120
bionic

released

40.0.2214.94-0ubuntu1.1120
cosmic

released

40.0.2214.94-0ubuntu1.1120
devel

released

40.0.2214.94-0ubuntu1.1120
disco

released

40.0.2214.94-0ubuntu1.1120
eoan

released

40.0.2214.94-0ubuntu1.1120
esm-apps/noble

released

40.0.2214.94-0ubuntu1.1120
esm-apps/resolute

released

40.0.2214.94-0ubuntu1.1120
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [40.0.2214.94-0ubuntu0.14.04.1.1068]]
esm-infra/focal

DNE

focal was released [40.0.2214.94-0ubuntu1.1120]

Показывать по

РелизСтатусПримечание
artful

not-affected

uses system openjpeg
bionic

not-affected

uses system openjpeg
cosmic

not-affected

uses system openjpeg
devel

not-affected

uses system openjpeg
disco

not-affected

uses system openjpeg
eoan

not-affected

uses system openjpeg
esm-apps-legacy/xenial

not-affected

uses system openjpeg
esm-apps/bionic

not-affected

uses system openjpeg
esm-apps/focal

not-affected

uses system openjpeg
esm-apps/jammy

not-affected

uses system openjpeg

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

cosmic

not-affected

devel

DNE

disco

not-affected

eoan

not-affected

esm-apps-legacy/xenial

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps-legacy/xenial

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

2.1.1-1
cosmic

not-affected

2.1.1-1
devel

not-affected

2.1.1-1
disco

not-affected

2.1.1-1
eoan

not-affected

2.1.1-1
esm-apps-legacy/xenial

released

2.1.2-1.1+deb9u2build0.1
esm-apps/bionic

not-affected

2.1.1-1
esm-apps/xenial

released

2.1.2-1.1+deb9u2build0.1
esm-infra-legacy/trusty

DNE

Показывать по

РелизСтатусПримечание
artful

not-affected

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
esm-infra-legacy/xenial

not-affected

esm-infra/focal

DNE

esm-infra/xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps-legacy/xenial

needed

esm-apps/xenial

ignored

end of ESM support, was needed
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/focal

DNE

Показывать по

EPSS

Процентиль: 76%
0.01727
Низкий

5 Medium

CVSS2

Связанные уязвимости

redhat
больше 11 лет назад

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.

nvd
больше 11 лет назад

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.

debian
больше 11 лет назад

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0. ...

github
около 4 лет назад

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.

EPSS

Процентиль: 76%
0.01727
Низкий

5 Medium

CVSS2

Уязвимость CVE-2014-7947