CVE-2014-7926

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

Risk Assessment

Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service availability loss. This could affect the organization's reputation and user trust.

Recommendation

It is recommended to update to the latest version of Google Chrome and to monitor systems for potential attempts to exploit this vulnerability.

Other vulnerabilities in International Components for Unicode (ICU) 52, Google Chrome before 40.0.2214.91

CVE-2014-7923High
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

Original NVD description (English source)

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.