CVE-2014-7941: Buffer Overflow
The SelectionOwner::ProcessTarget function in ui/base/x/selectionowner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7941?
CVE-2014-7941 has been assigned a severity rating of high due to its potential to cause a denial of service.
How do I fix CVE-2014-7941?
To fix CVE-2014-7941, update Google Chrome or the affected Red Hat Enterprise Linux packages to the latest version that addresses this vulnerability.
Which software versions are affected by CVE-2014-7941?
CVE-2014-7941 affects Google Chrome versions prior to 40.0.2214.91 and various Red Hat Enterprise Linux versions including 6.0.
What type of attack does CVE-2014-7941 facilitate?
CVE-2014-7941 facilitates a denial of service attack through out-of-bounds read issues when processing X11 data.
Is there a workaround for CVE-2014-7941?
There is no specific workaround for CVE-2014-7941 other than applying the necessary security updates to mitigate the vulnerability.