CVE-2014-9654

CRITICAL Year: 2014
CVSS v3 Score
9.8
Critical
CVSS v2 Score
7.5
High
Weakness Type
CWE-119
View all →

Vulnerability Description

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.

Related Vulnerabilities

CVE-1999-1588

CRITICAL
CVSS:9.8(Critical)

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka Syst...

CWE-1191999

CVE-2005-3590

CRITICAL
CVSS:9.8(Critical)

The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buff...

CWE-1192005

CVE-2007-5199

CRITICAL
CVSS:9.8(Critical)

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

CWE-1192007

CVE-2007-5341

CRITICAL
CVSS:9.8(Critical)

Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.

CWE-1192007

CVE-2007-6762

CRITICAL
CVSS:9.8(Critical)

In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array.

CWE-1192007

CVE-2008-3465

CRITICAL
CVSS:9.8(Critical)

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a de...

CWE-1192008