Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttp://rhn.redhat.com/errata/RHSA-2014-1894.html - http://secunia.com/advisories/62608 - https://code.google.com/p/chromium/issues/detail?id=421090 - https://code.google.com/p/chromium/issues/detail?id=414134 - https://code.google.com/p/chromium/issues/detail?id=389451 - https://code.google.com/p/chromium/issues/detail?id=417329 - https://code.google.com/p/chromium/issues/detail?id=424999 - https://www.exploit-db.com/exploits/34879/ - http://secunia.com/advisories/60194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98798 - https://code.google.com/p/chromium/issues/detail?id=425152 - https://code.google.com/p/chromium/issues/detail?id=415407 - https://code.google.com/p/chromium/issues
etail?id=425152 - https://code.google.com/p/chromium/issues/detail?id=415407 - https://code.google.com/p/chromium/issues/detail?id=411162 - https://code.google.com/p/chromium/issues/detail?id=424215 - https://code.google.com/p/chromium/issues/detail?id=417210 - https://code.google.com/p/chromium/issues/detail?id=337071 - http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html - https://code.google.com/p/chromium/issues/detail?id=433500 - https://code.google.com/p/chromium/issues/detail?id=421321 - https://code.google.com/p/chromium/issues/detail?id=422482 - https://code.google.com/p/chromium/issues/detail?id=411159 - https://code.google.com/p/chromium/issues/detail?id=
2482 - https://code.google.com/p/chromium/issues/detail?id=411159 - https://code.google.com/p/chromium/issues/detail?id=413743 - https://code.google.com/p/chromium/issues/detail?id=421504 - https://code.google.com/p/chromium/issues/detail?id=425151 - https://code.google.com/p/chromium/issues/detail?id=423891
CVE ID: CVE-2014-7911 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:03:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service, as demonstrated by the finalize method of android.os.BinderProxy, aka Bug 15874291. Additional Analyst Notes: - CVE Program Container: Re
y the finalize method of android.os.BinderProxy, aka Bug 15874291. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/libcore/+/738c833d38d41f8f76eb7e77ab39add82b1ae1e2 - http://seclists.org/fulldisclosure/2014/Nov/51
CVE ID: CVE-2014-7912 State: PUBLISHED Published: 2015-07-30T00:00:00 Last Updated: 2024-08-06T13:03:27.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033124 - http://www.zerodayinitiative.com/advisories/ZDI-15-0
ontainer: References: - http://www.securitytracker.com/id/1033124 - http://www.zerodayinitiative.com/advisories/ZDI-15-093/ - https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41c7213f0
CVE ID: CVE-2014-7913 State: PUBLISHED Published: 2015-07-30T00:00:00 Last Updated: 2024-08-06T13:03:27.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033124 - https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41
tytracker.com/id/1033124 - https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd8067250734511d955d8f792b41c7213f0
CVE ID: CVE-2014-7914 State: PUBLISHED Published: 2020-02-21T01:38:36 Last Updated: 2024-08-06T13:03:27.533Z Vendors: Google Products: Android Problem Types: Other Description: btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapping of a crafted NFC tag. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/bluetooth/bluedroid/+/0360aa7c418152a3e5e335a065ac3629cbb09559
CVE ID: CVE-2014-7915 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T13:03:27.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708. Additional Analyst Notes: - CVE Program Container: References: - http://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdf - https://android.googlesource.com/platform/frameworks/av/+/edd4a76eb4747bd19ed122df46fa46b452c12a0d
CVE ID: CVE-2014-7916 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T13:03:27.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751. Additional Analyst Notes: - CVE Program Container: References: - http://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdf - https://android.googlesource.com/platform/frameworks/av/+/edd4a76eb4747bd19ed122df46fa46b452c12a0d
CVE ID: CVE-2014-7917 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T13:03:27.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615. Additional Analyst Notes: - CVE Program Container: References: - http://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdf - https://android.googlesource.com/platform/frameworks/av/+/edd4a76eb4747bd19ed122df46fa46b452c12a0d
CVE ID: CVE-2014-7919 State: PUBLISHED Published: 2017-06-08T20:00:00 Last Updated: 2024-08-06T13:03:27.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexpark07/Bookmark/blob/master/BugHunting.md - https://github.com/alexpark07/Bookmark/issues/1 - http://www.securityfocus.com/bid/99014 - https://android.googlesource.com/platform/frameworks/native/+/ae33effd43a615183f089f0a216b5965e8104842%5E%21/#F0
CVE ID: CVE-2014-7920 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-06T13:03:27.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. Additional Analyst Notes: - CVE Program Container: References: - https://bits-please.blogspot.com/2016/01/android-privilege-escalation-to.html - https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/
CVE ID: CVE-2014-7921 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-06T13:03:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. Additional Analyst Notes: - CVE Program Container: References: - https://bits-please.blogspot.com/2016/01/android-privilege-escalation-to.html - https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21/
CVE ID: CVE-2014-7922 State: PUBLISHED Published: 2015-02-23T02:00:00 Last Updated: 2024-08-06T13:03:27.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding _opt_ parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scopes including the SID and LSID scopes, and consequently obtain access to a Google account, via a crafted application, as demonstrated by setting the has_permission=1 parameter value upon finding _opt_has_permission in that argument. A
on, as demonstrated by setting the has_permission=1 parameter value upon finding _opt_has_permission in that argument. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/isciurus/df4d7edd9c3efb4a0753 - http://isciurus.blogspot.com/2015/01/android-app-with-full-control-over-your.html
CVE ID: CVE-2014-7923 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb - http://www.
s/62665 - https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - https://codereview.chromium.org/726973003 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - https://code.google.com/p/chromium/issues/detail?id=430353 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201503-06 - http://www.securitytracker.com/id/1031623 -
/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201503-06 - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://advisories.mageia.org/MGASA-2015-0047.html - http://bugs.icu-project.org/trac/ticket/11370 - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383 - https://chromium.googlesource.com/chromium/deps/icu52/+/3af4ce5982311035e5f36803d547c0befa576c8c - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2014-7924 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - h
erences: - http://secunia.com/advisories/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=435880 - https://codereview.chromium.org/774593004 - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7925 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=434136 - http://googlechromereleases.blogspot.com/2015/01/stable-
- https://code.google.com/p/chromium/issues/detail?id=434136 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - https://src.chromium.org/viewvc/blink?revision=186914&view=revision - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://codereview.chromium.org/802593004 - https://src.chromium.org/viewvc/blink?revision=186482&view=revision - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7926 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb - https://cod
s/62665 - https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb - https://code.google.com/p/chromium/issues/detail?id=422824 - http://bugs.icu-project.org/trac/ticket/11369 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - https://codereview.chromium.org/726973003 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201503-
ttp://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201503-06 - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://advisories.mageia.org/MGASA-2015-0047.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383 - https://chromium.googlesource.com/chromium/deps/icu52/+/3af4ce5982311035e5f36803d547c0befa576c8c - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2014-7927 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=444695 - http://googlechromereleases.bl
cunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=444695 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383 - https://codereview.chromium.org/824843002
CVE ID: CVE-2014-7928 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://codereview.chromium.org/737383002 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advis
.chromium.org/737383002 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=435073 - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7929 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=443115 - ht
ner: References: - http://secunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=443115 - https://src.chromium.org/viewvc/blink?revision=187458&view=revision - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7930 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/
/advisories/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=442806 - https://src.chromium.org/viewvc/blink?revision=187435&view=revision - http://www.securitytracker.com/id/1031623 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7931 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://codereview.chromium.org/813023002 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - h
13023002 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.securitytracker.com/id/1031623 - https://code.google.com/p/chromium/issues/detail?id=442710 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7932 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 -
ries/62665 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://src.chromium.org/viewvc/blink?revision=185670&view=revision - http://www.securitytracker.com/id/1031623 - https://code.google.com/p/chromium/issues/detail?id=429666 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2014-7933 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T13:03:27.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62665 - https://code.google.com/p/chromium/issues/detail?id=427266 - http://git.videolan.org/?p=ffmp