Security Advisory

CVE-2014-7946

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-01-22 22:00:00
Last updated 2024-08-06 13:03:27
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.