CVE-2014-7942: The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or…

Description

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.6% · higher than 76% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CH

Chrome · Google

through 40.0.2214.85 · source: NVD

CH

Chromium · Chromium

40.0.2214.110 · source: NVD

EL

Enterprise Linux Desktop Supplementary · Redhat

6.0 · source: NVD

EL

Enterprise Linux Server Supplementary · Redhat

6.0 · source: NVD

EL

Enterprise Linux Server Supplementary Eus · Redhat

6.6.z · source: NVD

EL

Enterprise Linux Workstation Supplementary · Redhat

6.0 · source: NVD

OP

Opensuse · Opensuse

13.1; 13.2 · source: NVD

UL

Ubuntu Linux · Canonical

14.04; 14.10 · source: NVD