Lucene search

K
chromeHttps://chromereleases.googleblog.comGCSA-1568550181761662109
HistoryJun 18, 2013 - 12:00 a.m.

Stable Channel Update

2013-06-1800:00:00
https://chromereleases.googleblog.com
chromereleases.googleblog.com
4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%

The Stable channel has been updated to 27.0.1453.116 for Windows, Macintosh and Chrome Frame platforms.

Security fixes and rewards:

Please see the Chromium security page for more information. (Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.)

This automatic update includes security fixes. We'd like to highlight the following fixes for various reasons (crediting external researchers, issuing rewards, or highlighting particularly interesting issues):

  • [249335] Medium CVE-2013-2866: Clickjacking in the Flash plug-in.

This build also has fixes to the following issues:

  • Multiple flash movies on one page not playing [Issue: 243290]
  • Arc rendering bug in canvas [Issue: 243996]
  • Select box with Multiple option fires Onchange event on scroll [Issue: 244406]

Full details about what changes are in this build are available in the SVN revision log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grunberg
Google Chrome

Affected configurations

Vulners
Node
googlechromeRange<27.0.1453.116
CPENameOperatorVersion
google chromelt27.0.1453.116

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%