CVE-2014-7941
Fixed in a distro release EPSS 2%
The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.
Products: chromium, redhat enterprise_linux_desktop_supplementary, redhat enterprise_linux_server_supplementary, redhat enterprise_linux_server_supplementary_eus, redhat enterprise_linux_workstation_supplementary, google chrome, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | chromium-browser | 0:40.0.2214.91-1.el6_6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:40.0.2214.91-1.el6_6 |
| Ubuntu 14.04 LTS | chromium-browser | 40.0.2214.94-0ubuntu0.14.04.1.1068 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |