FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

chromium -- multiple vulnerabilities

Affected packages
chromium < 28.0.1500.95

Details

VuXML ID 69098c5c-fc4b-11e2-8ad0-00262d5ed8ee
Discovery 2013-07-30
Entry 2013-08-03

Google Chrome Releases reports:

Eleven vulnerabilities, including:

[257748] Medium CVE-2013-2881: Origin bypass in frame handling. Credit to Karthik Bhargavan.

[260106] High CVE-2013-2882: Type confusion in V8. Credit to Cloudfuzzer.

[260165] High CVE-2013-2883: Use-after-free in MutationObserver. Credit to Cloudfuzzer.

[248950] High CVE-2013-2884: Use-after-free in DOM. Credit to Ivan Fratric of Google Security Team.

[249640] [257353] High CVE-2013-2885: Use-after-free in input handling. Credit to Ivan Fratric of Google Security Team.

[261701] High CVE-2013-2886: Various fixes from internal audits, fuzzing and other initiatives.

References

CVE Name CVE-2013-2881
CVE Name CVE-2013-2882
CVE Name CVE-2013-2883
CVE Name CVE-2013-2884
CVE Name CVE-2013-2885
CVE Name CVE-2013-2886
URL http://www.googlechromereleases.blogspot.nl/