The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux_desktop_supplementary | Redhat | 6.0 (including) | 6.0 (including) |
| Enterprise_linux_server_supplementary | Redhat | 6.0 (including) | 6.0 (including) |
| Enterprise_linux_server_supplementary_eus | Redhat | 6.6.z (including) | 6.6.z (including) |
| Enterprise_linux_workstation_supplementary | Redhat | 6.0 (including) | 6.0 (including) |
| Supplementary for Red Hat Enterprise Linux 6 | RedHat | chromium-browser-0:40.0.2214.91-1.el6_6 | * |
| Chromium-browser | Ubuntu | devel | * |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | trusty | * |
| Chromium-browser | Ubuntu | upstream | * |
| Chromium-browser | Ubuntu | utopic | * |
| Chromium-browser | Ubuntu | vivid | * |
| Chromium-browser | Ubuntu | wily | * |
| Icu | Ubuntu | lucid | * |
| Icu | Ubuntu | precise | * |
| Icu | Ubuntu | trusty | * |
| Icu | Ubuntu | upstream | * |
| Icu | Ubuntu | utopic | * |
| Oxide-qt | Ubuntu | devel | * |
| Oxide-qt | Ubuntu | trusty | * |
| Oxide-qt | Ubuntu | upstream | * |
| Oxide-qt | Ubuntu | utopic | * |
| Oxide-qt | Ubuntu | vivid | * |
| Oxide-qt | Ubuntu | wily | * |