PT-2015-3266 · Google+5 · Google Chrome+5

Publicado

2015-01-21

·

Atualizado

2024-06-15

·

CVE-2014-7926

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 International Components for Unicode (ICU) versions prior to 52 SVN revision 292944
Description The issue is related to errors in the code of the Regular Expressions package. It may allow a remote attacker to cause a denial of service or possibly have other unspecified impacts, such as memory corruption, by utilizing a zero-length quantifier.
Recommendations For Google Chrome versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later to resolve the issue. For International Components for Unicode (ICU) versions prior to 52 SVN revision 292944, update to ICU version 52 SVN revision 292944 or later to resolve the issue.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1098
BDU:2016-01658
CVE-2014-7926
DLA-219-1
DSA-3187-1
MGASA-2015-0047
OPENSUSE-SU-2015_0441-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0093
RHSA-2015_0093
USN-2476-1
USN-2522-1

Produtos afetados

Alt Linux
Google Chrome
International Components For Unicode
Red Hat
Suse
Ubuntu