Unscored severity · published Jan 22, 2015
CVE-2014-7923
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
through 40.0.2214.85 · source: NVD
CM
Communications Messaging Server · Oracle
7.0.5; 8.0 · source: NVD
EL
Enterprise Linux Desktop Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary Eus · Redhat
6.6.z · source: NVD
EL
Enterprise Linux Workstation Supplementary · Redhat
6.0 · source: NVD
IC
International Components For Unicode · Icu-project
before 55.1 · source: NVD
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 14.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7923
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7923
advisories.mageia.org
http://advisories.mageia.org/MGASA-2015-0047.html
bugs.icu-project.org
http://bugs.icu-project.org/trac/ticket/11370
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-0093.html
secunia.com
http://secunia.com/advisories/62383
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability