Lucene search

K
cve[email protected]CVE-2014-7902
HistoryNov 19, 2014 - 11:59 a.m.

CVE-2014-7902

2014-11-1911:59:03
CWE-17
web.nvd.nist.gov
26
cve-2014-7902
pdfium
google chrome
vulnerability
remote attackers
denial of service
crafted pdf document

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%

Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.

Affected configurations

NVD
Node
googlechromeMatch39.0.2171.63

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%