chromium -- multiple vulnerabilities

2017-04-19T00:00:00
ID 95A74A48-2691-11E7-9E2D-E8E0B747A45A
Type freebsd
Reporter FreeBSD
Modified 2017-04-19T00:00:00

Description

Google Chrome Releases reports:

29 security fixes in this release, including:

[695826] High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360 [694382] High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani [684684] High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative [683314] Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng [672847] Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah) [702896] Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous [700836] Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip [693974] Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar [704560] Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani [690821] Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to Prof. Zhenhua Duan, Prof. Cong Tian, and Ph.D candidate Chu Chen (ICTT, Xidian University) [648117] Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani [691726] Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman [713205] Various fixes from internal audits, fuzzing and other initiatives