CVE-2014-7942
Fixed in a distro release EPSS 2%
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Products: chromium, redhat enterprise_linux_desktop_supplementary, redhat enterprise_linux_server_supplementary, redhat enterprise_linux_server_supplementary_eus, redhat enterprise_linux_workstation_supplementary, google chrome, opensuse, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | chromium-browser | 0:40.0.2214.91-1.el6_6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:40.0.2214.91-1.el6_6 |
| Ubuntu 14.04 LTS | chromium-browser | 40.0.2214.94-0ubuntu0.14.04.1.1068 |
| Ubuntu 14.04 LTS | oxide-qt | 1.4.2-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | chromium | 55.0.2883.75-3.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |