CVE-2014-7941

MEDIUM 5.0CVE-2014-7941 · Published 22/01/2015 · updated 17/06/2026

In short

CVE-2014-7941 is a MEDIUM (CVSS 5.0) vulnerability affecting chromium (chromium), chrome (google).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
chromium chromium	`= 40.0.2214.110`	No fix yet
chrome google	`≤ 40.0.2214.85`	No fix yet

Description

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.

References

More vulnerabilities in chromium

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

chromium

= 40.0.2214.110

No fix yet

chrome

google

≤ 40.0.2214.85

No fix yet

More vulnerabilities in chromium

See all →