CVE-2014-7941

MEDIUM · 5.0 CVSS Gepubliceerd: 22-01-2015 CWE-119

Beschrijving

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.

Vendors

Chromium Redhat Google Opensuse

Affected products

Chromium Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary Enterprise Linux Server Supplementary Eus Enterprise Linux Workstation Supplementary Chrome Opensuse

References

googlechromereleases.blogspot.com
lists.opensuse.org
rhn.redhat.com
secunia.com
secunia.com
security.gentoo.org
www.securityfocus.com
www.securitytracker.com
code.google.com
codereview.chromium.org