Lucene search

K
cveChromeCVE-2014-7903
HistoryNov 19, 2014 - 11:59 a.m.

CVE-2014-7903

2014-11-1911:59:04
CWE-119
Chrome
web.nvd.nist.gov
52
cve-2014-7903
openjpeg
pdfium
google chrome
buffer overflow
denial of service
vulnerability
cybersecurity

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.013

Percentile

86.1%

Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image.

Affected configurations

Nvd
Node
googlechromeRange39.0.2171.45
VendorProductVersionCPE
googlechromecpe:/a:google:chrome::::

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.013

Percentile

86.1%