CVE-2014-7923

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

Risk Assessment

An attacker may exploit this vulnerability to cause application crashes, potentially leading to service downtime and financial losses for the organization.

Recommendation

It is recommended to update to the latest version of Google Chrome and monitor the use of the ICU package to minimize risk.

Other vulnerabilities in International Components for Unicode (ICU) 52, Google Chrome before 40.0.2214.91

CVE-2014-7926High
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

Original NVD description (English source)

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.