Lucene search

K
cve[email protected]CVE-2014-7908
HistoryNov 19, 2014 - 11:59 a.m.

CVE-2014-7908

2014-11-1911:59:09
CWE-189
web.nvd.nist.gov
40
cve-2014-7908
integer overflows
google chrome
denial of service
nvd
security vulnerability
media container

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.

Affected configurations

NVD
Node
googlechromeRange39.0.2171.45

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%