Red Hat Security AdvisoryRHSA-2014:1894
chromium-browser security update
Released 2014-11-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-39.0.2171.65-2.el6_6
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-39.0.2171.65-2.el6_6
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-39.0.2171.65-2.el6_6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-39.0.2171.65-2.el6_6
Fixes 7 records
Priority MEDIUM 43
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07653 · Published 2014-11-19 · Partial fix
Priority LOW 37
Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that trigge…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01864 · Published 2014-11-19 · Fixed CWE-399
Priority LOW 36
Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01606 · Published 2014-11-19 · Partial fix CWE-189
Priority LOW 36
Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibl…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01606 · Published 2014-11-19 · Partial fix CWE-399
Priority LOW 36
Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01632 · Published 2014-11-19 · Partial fix CWE-119
Priority LOW 26
effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering cra…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01618 · Published 2014-11-19 · Fixed CWE-189
Priority LOW 25
Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01253 · Published 2014-11-19 · Fixed CWE-20