CVE-2014-7926
Fixed in a distro release EPSS 2%
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
Products: redhat enterprise_linux_desktop_supplementary, redhat enterprise_linux_server_supplementary, redhat enterprise_linux_server_supplementary_eus, redhat enterprise_linux_workstation_supplementary, opensuse, google chrome, oracle communications_messaging_server, icu-project international_components_for_unicode, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icu | 52.1-7.1 |
| Debian 13 | icu | 52.1-7.1 |
| Debian 14 | icu | 52.1-7.1 |
| Debian 6.0 | icu | 4.4.1-8+squeeze3 |
| Debian 7 | icu | 4.8.1.1-12+deb7u2 |
| Red Hat rhel extras 6 | chromium-browser | 0:40.0.2214.91-1.el6_6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:40.0.2214.91-1.el6_6 |
| Ubuntu 14.04 LTS | chromium-browser | 40.0.2214.94-0ubuntu0.14.04.1.1068 |
| Ubuntu 14.04 LTS | icu | 52.1-3ubuntu0.2 |
| Ubuntu 14.04 LTS | oxide-qt | 1.4.2-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |