CVE

Id
75234  
CVE No.
CVE-2014-7933  
Status
Candidate  
Description
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.  
Phase
Assigned (20141006)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
698140 75234 CVE-2014-7933 CONFIRM:http://git.videolan.org/?p=ffmpeg.git;a=commit;h=490a3ebf36821b81f73e34ad3f554cb523dd2682  View
698141 75234 CVE-2014-7933 CONFIRM:http://googlechromereleases.blogspot.com/2015/01/stable-update.html  View
698142 75234 CVE-2014-7933 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=427266  View
698143 75234 CVE-2014-7933 GENTOO:GLSA-201502-13  View
698144 75234 CVE-2014-7933 URL:http://security.gentoo.org/glsa/glsa-201502-13.xml  View
698145 75234 CVE-2014-7933 REDHAT:RHSA-2015:0093  View
698146 75234 CVE-2014-7933 URL:http://rhn.redhat.com/errata/RHSA-2015-0093.html  View
698147 75234 CVE-2014-7933 SUSE:openSUSE-SU-2015:0441  View
698148 75234 CVE-2014-7933 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html  View
698149 75234 CVE-2014-7933 UBUNTU:USN-2476-1  View
698150 75234 CVE-2014-7933 URL:http://www.ubuntu.com/usn/USN-2476-1  View
698151 75234 CVE-2014-7933 BID:72288  View
698152 75234 CVE-2014-7933 URL:http://www.securityfocus.com/bid/72288  View
698153 75234 CVE-2014-7933 SECTRACK:1031623  View
698154 75234 CVE-2014-7933 URL:http://www.securitytracker.com/id/1031623  View
698155 75234 CVE-2014-7933 SECUNIA:62575  View
698156 75234 CVE-2014-7933 URL:http://secunia.com/advisories/62575  View
698157 75234 CVE-2014-7933 SECUNIA:62383  View
698158 75234 CVE-2014-7933 URL:http://secunia.com/advisories/62383  View
698159 75234 CVE-2014-7933 SECUNIA:62665  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18895 JVNDB-2014-007770 Google Chrome の UI の実装の ui/base/x/selection_owner.cc の SelectionOwner::ProcessTarget 関数におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の UI の実装の ui/base/x/selection_owner.cc 内の SelectionOwner::ProcessTarget 関数は、特定の length 値に対して不正なデータ型を使用するため、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2014-7941 75234 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007770.html  View