LWN.net Logo

chromium: multiple vulnerabilities

Package(s):chromium CVE #(s):CVE-2013-0879 CVE-2013-0880 CVE-2013-0881 CVE-2013-0882 CVE-2013-0883 CVE-2013-0884 CVE-2013-0885 CVE-2013-0886 CVE-2013-0887 CVE-2013-0888 CVE-2013-0889 CVE-2013-0890 CVE-2013-0891 CVE-2013-0892 CVE-2013-0893 CVE-2013-0894 CVE-2013-0895 CVE-2013-0896 CVE-2013-0897 CVE-2013-0898 CVE-2013-0899 CVE-2013-0900
Created:March 14, 2013 Updated:March 20, 2013
Description:

From the openSUSE advisory:

Chromium was updated to version 27.0.1425 having both stability and security fixes:

  • High CVE-2013-0879: Memory corruption with web audio node
  • High CVE-2013-0880: Use-after-free in database handling
  • Medium CVE-2013-0881: Bad read in Matroska handling
  • High CVE-2013-0882: Bad memory access with excessive SVG parameters.
  • Medium CVE-2013-0883: Bad read in Skia.
  • Low CVE-2013-0884: Inappropriate load of NaCl.
  • Medium CVE-2013-0885: Too many API permissions granted to web store
  • Medium CVE-2013-0886: Incorrect NaCl signal handling.
  • Low CVE-2013-0887: Developer tools process has too many permissions and places too much trust in the connected server
  • Medium CVE-2013-0888: Out-of-bounds read in Skia
  • Low CVE-2013-0889: Tighten user gesture check for dangerous file downloads.
  • High CVE-2013-0890: Memory safety issues across the IPC layer.
  • High CVE-2013-0891: Integer overflow in blob handling.
  • Medium CVE-2013-0892: Lower severity issues across the IPC layer
  • Medium CVE-2013-0893: Race condition in media handling.
  • High CVE-2013-0894: Buffer overflow in vorbis decoding.
  • High CVE-2013-0895: Incorrect path handling in file copying.
  • High CVE-2013-0896: Memory management issues in plug-in message handling
  • Low CVE-2013-0897: Off-by-one read in PDF
  • High CVE-2013-0898: Use-after-free in URL handling
  • Low CVE-2013-0899: Integer overflow in Opus handling
  • Medium CVE-2013-0900: Race condition in ICU
Alerts:
openSUSE openSUSE-SU-2013:0454-1 2013-03-14
Fedora FEDORA-2013-3546 2013-03-17
Fedora FEDORA-2013-3538 2013-03-16

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds