EUVD-2014-7798

Malware in sbrugna...

chromium-browser: caching error in AppCache

A flaw was found in the AppCache component of the Chromium browser. A remote attacker could exploit improper error handling during application caching to manipulate cached web resources. This flaw could result in unauthorized modification of application content and compromised data integrity...

CVE-2014-7948: Undefined Security Weakness

The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcacheupdatejob.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5...