CVE-2014-7940
Fixed in a distro release EPSS 2%
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.
Products: google chrome, icu-project international_components_for_unicode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icu | 52.1-7.1 |
| Debian 13 | icu | 52.1-7.1 |
| Debian 14 | icu | 52.1-7.1 |
| Debian 6.0 | icu | 4.4.1-8+squeeze3 |
| Debian 7 | icu | 4.8.1.1-12+deb7u2 |
| Red Hat rhel extras 6 | chromium-browser | 0:40.0.2214.91-1.el6_6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:40.0.2214.91-1.el6_6 |
| Ubuntu 14.04 LTS | chromium-browser | 40.0.2214.94-0ubuntu0.14.04.1.1068 |
| Ubuntu 14.04 LTS | icu | 52.1-3ubuntu0.2 |
| Ubuntu 14.04 LTS | oxide-qt | 1.4.2-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |