Lucene search

K
osvGoogleOSV:DSA-2741-1
HistoryAug 25, 2013 - 12:00 a.m.

chromium-browser - several

2013-08-2500:00:00
Google
osv.dev
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Several vulnerabilities have been discovered in the Chromium web browser.

  • CVE-2013-2887
    The chrome 29 development team found various issues from internal
    fuzzing, audits, and other studies.
  • CVE-2013-2900
    Krystian Bigaj discovered a file handling path sanitization issue.
  • CVE-2013-2901
    Alex Chapman discovered an integer overflow issue in ANGLE, the
    Almost Native Graphics Layer.
  • CVE-2013-2902
    cloudfuzzer discovered a use-after-free issue in XSLT.
  • CVE-2013-2903
    cloudfuzzer discovered a use-after-free issue in HTMLMediaElement.
  • CVE-2013-2904
    cloudfuzzer discovered a use-after-free issue in XML document
    parsing.
  • CVE-2013-2905
    Christian Jaeger discovered an information leak due to insufficient
    file permissions.

For the stable distribution (wheezy), these problems have been fixed in
version 29.0.1547.57-1~deb7u1.

For the testing distribution (jessie), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
version 29.0.1547.57-1.

We recommend that you upgrade your chromium-browser packages.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P