Lucene search

K
freebsdFreeBSD79356040-5DA4-11E3-829E-00262D5ED8EE
HistoryDec 04, 2013 - 12:00 a.m.

chromium -- multiple vulnerabilities

2013-12-0400:00:00
vuxml.freebsd.org
15

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.2%

Google Chrome Releases reports:

15 security fixes in this release, including:

[307159] Medium CVE-2013-6634: Session fixation in sync related
to 302 redirects. Credit to Andrey Labunets.
[314469] High CVE-2013-6635: Use-after-free in editing. Credit
to cloudfuzzer.
[322959] Medium CVE-2013-6636: Address bar spoofing related to
modal dialogs. Credit to Bas Venis.
[325501] CVE-2013-6637: Various fixes from internal audits,
fuzzing and other initiatives.
[319722] Medium CVE-2013-6638: Buffer overflow in v8. This
issue was fixed in v8 version 3.22.24.7. Credit to Jakob Kummerow
of the Chromium project.
[319835] High CVE-2013-6639: Out of bounds write in v8. This
issue was fixed in v8 version 3.22.24.7. Credit to Jakob Kummerow
of the Chromium project.
[319860] Medium CVE-2013-6640: Out of bounds read in v8. This
issue was fixed in v8 version 3.22.24.7. Credit to Jakob Kummerow
of the Chromium project.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 31.0.1650.63UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.2%