deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-0425
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Siebel Core - Unix/Windows.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72185; http://www.securitytracker.com/id/1031578
CVE: CVE-2015-0426
Published: 2015-01-21
Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72235; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2015-0427
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.
CVSS Score: 3.2 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72216
CVE: CVE-2015-0428
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72144; http://www.securitytracker.com/id/1031583
CVE: CVE-2015-0429
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72133; http://www.securitytracker.com/id/1031583
CVE: CVE-2015-0430
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility.
CVSS Score: 1.9 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72141; http://www.securitytracker.com/id/1031583
CVE: CVE-2015-0431
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3.2, 6.3.4, and 6.3.5 allows remote attackers to affect integrity via unknown vectors related to UI Infrastructure.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/62506; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72125
CVE: CVE-2015-0432
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149929.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html; http://rhn.redhat.com/errata/RHSA-2015-0116.html
CVE: CVE-2015-0434
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/62473; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72226
CVE: CVE-2015-0435
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/62506; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72122
CVE: CVE-2015-0436
Published: 2015-01-21
Description: Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/72249; http://www.securitytracker.com/id/1031589
CVE: CVE-2015-0437
Published: 2015-01-21
Description: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html; http://rhn.redhat.com/errata/RHSA-2015-0080.html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2014-8008
Published: 2015-01-22
Description: Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8008; http://www.securityfocus.com/bid/72263; http://www.securitytracker.com/id/1031604
CVE: CVE-2015-0925
Published: 2015-01-22
Description: The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/110652; http://www.kb.cert.org/vuls/id/110652
CVE: CVE-2015-1306
Published: 2015-01-22
Description: The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://advisories.mageia.org/MGASA-2015-0085.html; http://secunia.com/advisories/62387; http://secunia.com/advisories/62442
CVE: CVE-2015-1175
Published: 2015-01-22
Description: Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layered_price_slider parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://octogence.com/advisories/cve-2015-1175-xss-prestashop/; http://packetstormsecurity.com/files/130026/Prestashop-1.6.0.9-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/534511/100/0/threaded
CVE: CVE-2015-1309
Published: 2015-01-22
Description: XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATT_DISPLAY_XMLSTRING_REMOTE, aka SAP Note 2016638.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/62469; https://erpscan.io/advisories/erpscan-15-001-sap-netweaver-ecatt_display_xmlstring_remote-xxe/; https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE: CVE-2015-1310
Published: 2015-01-22
Description: SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/; https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE: CVE-2015-1311
Published: 2015-01-22
Description: The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/; https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE: CVE-2015-1312
Published: 2015-01-22
Description: The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other unspecified impact via unknown vectors, aka SAP Note 2000401.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/; https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE: CVE-2014-7923
Published: 2015-01-22
Description: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://advisories.mageia.org/MGASA-2015-0047.html; http://bugs.icu-project.org/trac/ticket/11370; http://googlechromereleases.blogspot.com/2015/01/stable-update.html
CVE: CVE-2014-7924
Published: 2015-01-22
Description: Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.
CVSS Score: 5.0 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7925
Published: 2015-01-22
Description: Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7926
Published: 2015-01-22
Description: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://advisories.mageia.org/MGASA-2015-0047.html; http://bugs.icu-project.org/trac/ticket/11369; http://googlechromereleases.blogspot.com/2015/01/stable-update.html
CVE: CVE-2014-7927
Published: 2015-01-22
Description: The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7928
Published: 2015-01-22
Description: hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7929
Published: 2015-01-22
Description: Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7930
Published: 2015-01-22
Description: Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7931
Published: 2015-01-22
Description: factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7932
Published: 2015-01-22
Description: Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7933
Published: 2015-01-22
Description: Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
CVSS Score: 7.5 (HIGH)
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=490a3ebf36821b81f73e34ad3f554cb523dd2682; http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2014-7934
Published: 2015-01-22
Description: Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7935
Published: 2015-01-22
Description: Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7936
Published: 2015-01-22
Description: Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.
CVSS Score: 6.8 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7937
Published: 2015-01-22
Description: Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8c50704ebf1777bee76772c4835d9760b3721057; http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2014-7938
Published: 2015-01-22
Description: The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7939
Published: 2015-01-22
Description: Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7940
Published: 2015-01-22
Description: The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://advisories.mageia.org/MGASA-2015-0047.html; http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2014-7941
Published: 2015-01-22
Description: The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7942
Published: 2015-01-22
Description: The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7943
Published: 2015-01-22
Description: Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7944
Published: 2015-01-22
Description: The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7945
Published: 2015-01-22
Description: OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, and t2.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html
CVE: CVE-2014-7946
Published: 2015-01-22
Description: The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2015/01/stable-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html; http://rhn.redhat.com/errata/RHSA-2015-0093.html