[SECURITY] [DSA 2797-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2797-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 16, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2799-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated chromium-browser-stable packages fix multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Various fixes from internal audits, fuzzing and other initiatives CVE-2013-2931. Use after free related to speech input elements CVE-2013-6621. Use after free related to media elements CVE-2013-6622. Out of bounds read in SVG...

CVE-2013-6626

The WebContentsImpl::AttachInterstitialPage function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-6626

CVE-2013-6626 affects Chromium/Google Chrome prior to 31.0.1650.48. The issue is due to WebContentsImpl::AttachInterstitialPage not canceling JavaScript dialogs when showing an interstitial warning, enabling spoofing of the address bar on a crafted site. Multiple OS advisories (openSUSE openSUSE-...

FreeBSD : chromium -- multiple vulnerabilities (3bfc7016-4bcc-11e3-b0cf-00262d5ed8ee)

Google Chrome Releases reports : 25 security fixes in this release, including : - 268565 Medium CVE-2013-6621: Use after free related to speech input elements. Credit to Khalil Zhani. - 272786 High CVE-2013-6622: Use after free related to media elements. Credit to cloudfuzzer. - 282925 High...

CVE-2012-6626

creationtimestamp| type| source ---|---|--- 2012-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18882...

CVE-2008-6626

CVE-2008-6626 corresponds to an SQL injection in getin.php of WEBBDOMAIN Quiz 1.02 and earlier, exploitable via the username parameter to execute arbitrary SQL commands. Documents confirm the affected software/module (WEBBDOMAIN Quiz) and the underlying flaw (unsafeguarded SQL handling), with rem...

CVE-2008-6626

creationtimestamp| type| source ---|---|--- 2008-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6985...

CVE-2006-6626

CVE-2006-6626 is a documented XSS vulnerability in Moodle, affecting Moodle 1.5 (and related CVEs). The connected sources specify that the issue allows remote attackers to inject arbitrary scripts via a javascript: URI in the SRC attribute of an IMG element, with the vulnerability described acros...