Lucene search

K
freebsdFreeBSD46BD747B-5B84-11E2-B06D-00262D5ED8EE
HistoryJan 10, 2013 - 12:00 a.m.

chromium -- multiple vulnerabilities

2013-01-1000:00:00
vuxml.freebsd.org
11

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

85.0%

Google Chrome Releases reports:

[162494] High CVE-2012-5145: Use-after-free in SVG layout. Credit
to Atte Kettunen of OUSPG.
[165622] High CVE-2012-5146: Same origin policy bypass with
malformed URL. Credit to Erling A Ellingsen and Subodh Iyengar,
both of Facebook.
[165864] High CVE-2012-5147: Use-after-free in DOM handling.
Credit to José A. VÑzquez.
[167122] Medium CVE-2012-5148: Missing filename sanitization in
hyphenation support. Credit to Google Chrome Security Team (Justin
Schuh).
[166795] High CVE-2012-5149: Integer overflow in audio IPC
handling. Credit to Google Chrome Security Team (Chris Evans).
[165601] High CVE-2012-5150: Use-after-free when seeking video.
Credit to Google Chrome Security Team (Inferno).
[165538] High CVE-2012-5151: Integer overflow in PDF JavaScript.
Credit to Mateusz Jurczyk, with contribution from Gynvael Coldwind,
both of Google Security Team.
[165430] Medium CVE-2012-5152: Out-of-bounds read when seeking
video. Credit to Google Chrome Security Team (Inferno).
[164565] High CVE-2012-5153: Out-of-bounds stack access in v8.
Credit to Andreas Rossberg of the Chromium development
community.
[Mac only] [163208] Medium CVE-2012-5155: Missing Mac sandbox for
worker processes. Credit to Google Chrome Security Team (Julien
Tinnes).
[162778] High CVE-2012-5156: Use-after-free in PDF fields. Credit
to Mateusz Jurczyk, with contribution from Gynvael Coldwind, both
of Google Security Team.
[162776] [162156] Medium CVE-2012-5157: Out-of-bounds reads in PDF
image handling. Credit to Mateusz Jurczyk, with contribution from
Gynvael Coldwind, both of Google Security Team.
[162153] High CVE-2013-0828: Bad cast in PDF root handling. Credit
to Mateusz Jurczyk, with contribution from Gynvael Coldwind, both
of Google Security Team.
[162114] High CVE-2013-0829: Corruption of database metadata
leading to incorrect file access. Credit to Google Chrome Security
Team (Jüri Aedla).
[161836] Low CVE-2013-0831: Possible path traversal from extension
process. Credit to Google Chrome Security Team (Tom Sepez).
[160380] Medium CVE-2013-0832: Use-after-free with printing.
Credit to Google Chrome Security Team (Cris Neckar).
[154485] Medium CVE-2013-0833: Out-of-bounds read with printing.
Credit to Google Chrome Security Team (Cris Neckar).
[154283] Medium CVE-2013-0834: Out-of-bounds read with glyph
handling. Credit to Google Chrome Security Team (Cris Neckar).
[152921] Low CVE-2013-0835: Browser crash with geolocation. Credit
to Arthur Gerkis.
[150545] High CVE-2013-0836: Crash in v8 garbage collection.
Credit to Google Chrome Security Team (Cris Neckar).
[145363] Medium CVE-2013-0837: Crash in extension tab handling.
Credit to Tom Nielsen.
[Linux only] [143859] Low CVE-2013-0838: Tighten permissions on
shared memory segments. Credit to Google Chrome Security Team
(Chris Palmer).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium<Β 24.0.1312.52UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

85.0%