high7.5Public exploit code
CVE-2014-7910
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknow…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CUPS Filter - Bash Environment Variable Code Injection (Metasploit)2014-10-29 · remote · linux · Verified
- Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection2014-10-06 · remote · linux · Verified
- Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)2014-10-06 · webapps · cgi · Verified
- Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)2014-10-02 · remote · linux · Verified
- IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection2014-10-01 · webapps · cgi · Verified
- GNU Bash - Environment Variable Command Injection (Metasploit)2014-09-25 · remote · cgi · Verified
- Bash - 'Shellshock' Environment Variables Command Injection2014-09-25 · remote · linux · Verified
- GNU Bash - 'Shellshock' Environment Variable Command Injection2014-09-25 · remote · linux · Verified
- Kemp Load Master 7.1.16 - Multiple Vulnerabilities2015-04-02 · webapps · multiple
- QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)2015-03-26 · remote · hardware
- QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)2015-03-26 · remote · hardware
- PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection2014-11-03 · webapps · php
Impact
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 39.0.2171.45 |
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html
- http://rhn.redhat.com/errata/RHSA-2014-1894.html
- http://secunia.com/advisories/60194
- http://secunia.com/advisories/62608
- http://www.securityfocus.com/bid/71161
- http://www.securitytracker.com/id/1031241
- https://code.google.com/p/chromium/issues/detail?id=337071
- https://code.google.com/p/chromium/issues/detail?id=340387
- https://code.google.com/p/chromium/issues/detail?id=389451
- https://code.google.com/p/chromium/issues/detail?id=391001
- https://code.google.com/p/chromium/issues/detail?id=397396
- https://code.google.com/p/chromium/issues/detail?id=408426
- https://code.google.com/p/chromium/issues/detail?id=409454
- https://code.google.com/p/chromium/issues/detail?id=409508
- https://code.google.com/p/chromium/issues/detail?id=411159
- https://code.google.com/p/chromium/issues/detail?id=411162
- https://code.google.com/p/chromium/issues/detail?id=411165
- https://code.google.com/p/chromium/issues/detail?id=413743
- https://code.google.com/p/chromium/issues/detail?id=413744
- https://code.google.com/p/chromium/issues/detail?id=414134
- https://code.google.com/p/chromium/issues/detail?id=415407
- https://code.google.com/p/chromium/issues/detail?id=417210
- https://code.google.com/p/chromium/issues/detail?id=417329
- https://code.google.com/p/chromium/issues/detail?id=421090
- https://code.google.com/p/chromium/issues/detail?id=421321