CVE-2014-7940 in Oracle Communications Messaging Server

Summary

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.

Reservation

10/06/2014

Disclosure

01/22/2015

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
78624	Oracle Communications Messaging Server resource management	399	Not defined	Official fix	CVE-2014-7940
68841	Google Chrome ICU resource management	399	Unproven	Official fix	CVE-2014-7940