Vulnerability Details : CVE-2014-7909
effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.
Vulnerability category: Denial of service
Products affected by CVE-2014-7909
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-7909
2.95%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 91 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-7909
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2014-7909
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-7909
-
http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html
Chrome Releases: Stable Channel UpdateVendor Advisory
-
http://www.securityfocus.com/bid/71167
Google Chrome CVE-2014-7909 Information Disclosure Vulnerability
-
https://skia.googlesource.com/skia/+/1c577cd3ee331944b9061ee0eec147b211ee563c
1c577cd3ee331944b9061ee0eec147b211ee563c - skia - Git at Google
-
http://www.securitytracker.com/id/1031241
Google Chrome Multiple Bugs Let Remote Users Execute Arbitrary Code and Obtain Information - SecurityTracker
-
http://rhn.redhat.com/errata/RHSA-2014-1894.html
RHSA-2014:1894 - Security Advisory - Red Hat Customer Portal
-
https://code.google.com/p/chromium/issues/detail?id=391001
391001 - Use-of-uninitialized-value in SkFlatDictionary<SkPaint, SkPaint::FlatteningTraits>::findAndReturnMutableF - chromium - Monorail
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/98797
Google Chrome Skia information disclosure CVE-2014-7909 Vulnerability Report
Jump to