CVE

Id
75225  
CVE No.
CVE-2014-7924  
Status
Candidate  
Description
Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.  
Phase
Assigned (20141006)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
697951 75225 CVE-2014-7924 CONFIRM:http://googlechromereleases.blogspot.com/2015/01/stable-update.html  View
697952 75225 CVE-2014-7924 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=435880  View
697953 75225 CVE-2014-7924 CONFIRM:https://codereview.chromium.org/774593004  View
697954 75225 CVE-2014-7924 GENTOO:GLSA-201502-13  View
697955 75225 CVE-2014-7924 URL:http://security.gentoo.org/glsa/glsa-201502-13.xml  View
697956 75225 CVE-2014-7924 REDHAT:RHSA-2015:0093  View
697957 75225 CVE-2014-7924 URL:http://rhn.redhat.com/errata/RHSA-2015-0093.html  View
697958 75225 CVE-2014-7924 SUSE:openSUSE-SU-2015:0441  View
697959 75225 CVE-2014-7924 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html  View
697960 75225 CVE-2014-7924 UBUNTU:USN-2476-1  View
697961 75225 CVE-2014-7924 URL:http://www.ubuntu.com/usn/USN-2476-1  View
697962 75225 CVE-2014-7924 BID:72288  View
697963 75225 CVE-2014-7924 URL:http://www.securityfocus.com/bid/72288  View
697964 75225 CVE-2014-7924 SECTRACK:1031623  View
697965 75225 CVE-2014-7924 URL:http://www.securitytracker.com/id/1031623  View
697966 75225 CVE-2014-7924 SECUNIA:62575  View
697967 75225 CVE-2014-7924 URL:http://secunia.com/advisories/62575  View
697968 75225 CVE-2014-7924 SECUNIA:62383  View
697969 75225 CVE-2014-7924 URL:http://secunia.com/advisories/62383  View
697970 75225 CVE-2014-7924 SECUNIA:62665  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18894 JVNDB-2014-007769 Google Chrome で使用される Blink の DOM の実装におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Blink の DOM の実装の core/dom/Element.cpp の Element::detach 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-7932 75225 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007769.html  View