Lucene search

K
cveChromeCVE-2014-7924
HistoryJan 22, 2015 - 10:59 p.m.

CVE-2014-7924

2015-01-2222:59:05
Chrome
web.nvd.nist.gov
55
cve-2014-7924
use-after-free
vulnerability
google chrome
indexeddb
denial of service
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

9.4

Confidence

High

EPSS

0.018

Percentile

88.4%

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.

Affected configurations

Nvd
Node
googlechromeRange40.0.2214.85
VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

9.4

Confidence

High

EPSS

0.018

Percentile

88.4%