Google Fixes 159 Flaws in Chrome

Google updates its Chrome browser on a very aggressive timeline, often a couple of times a month. Usually, each update includes a handful of security fixes, maybe 12 or 15. On Tuesday, the company released Chrome 38, which patched a staggering 159 vulnerabilities. The huge majority of those...

FreeBSD : chromium -- multiple vulnerabilities (d2bbcc01-4ec3-11e4-ab3f-00262d5ed8ee)

Google Chrome Releases reports : 159 security fixes in this release, including 113 found using MemorySanitizer : - 416449 Critical CVE-2014-3188: A special thanks to Juri Aedla for a combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox. - 398384 High...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

UBUNTU-CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

UBUNTU-CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-3198

Removed by vendor...

CVE-2014-3189

Removed by vendor...

CVE-2014-3198

CVE-2014-3198 affects Google Chrome (PDFium in the Chromium PDF viewer). The issue arises in Instance::HandleInputEvent in pdf/instance.cc where a value of -1 is misinterpreted as an index instead of a no-visible-page error, enabling a remote attacker to perform an out-of-bounds read and cause a ...

CVE-2014-3189

CVE-2014-3189 affects Google Chrome (Chromium) before 38.0.2125.101. The vulnerability is in the PDFium component, specifically in the function chrome_pdf::CopyImage in pdf/draw_utils.cc, which does not properly validate image-data dimensions. This can enable a remote attacker to trigger an out-o...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 38 to the stable channel for Windows, Mac and Linux. Chrome 38.0.2125.101 contains a number of fixes and improvements, including: - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance A...

Google Chrome < 38.0.2125.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 37.0.2062.94. It is, therefore, affected by the following vulnerabilities : - A flaw exists in V8 and IPC that can lead to remote code execution. CVE-2014-3188 - Out-of-bounds read errors exist in PDFium. CVE-2014-318...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 159 security fixes in this release, including 113 found using MemorySanitizer: 416449 Critical CVE-2014-3188: A special thanks to Jüri Aedla for a combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox. 398384 High...