CVE-2014-7204

Published: Oct 7, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.

Affected (6)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux, Exuberant Ctags · Mageia: Mageia

1 product

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Exuberant Ctags	Version 5.8

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Mageia Mageia	Version 3.0
Mageia Mageia	Version 4.0

Related CWEs

CWE-399

References (14)

http://advisories.mageia.org/MGASA-2014-0415.html

Source: cve@mitre.org

Third Party Advisory

http://sourceforge.net/p/ctags/code/791/

Source: cve@mitre.org

Issue TrackingPatch

http://www.debian.org/security/2014/dsa-3042

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:178

Source: cve@mitre.org

Broken Link

http://www.openwall.com/lists/oss-security/2014/09/29/40

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.ubuntu.com/usn/USN-2371-1

Source: cve@mitre.org

Third Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742605

Source: cve@mitre.org

ExploitIssue Tracking

http://advisories.mageia.org/MGASA-2014-0415.html