Executive Summary

Summary
Title chromium-browser security update
Informations
Name DSA-3039 First vendor Publication 2014-09-28
Vendor Debian Last vendor Modification 2014-09-28
Severity (Vendor) N/A Revision 1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Several vulnerabilities were discovered in the chromium web browser.

CVE-2014-3160

Christian Schneider discovered a same origin bypass issue in SVG file resource fetching.

CVE-2014-3162

The Google Chrome development team addressed multiple issues with potential security impact for chromium 36.0.1985.125.

CVE-2014-3165

Colin Payne discovered a use-after-free issue in the Web Sockets implementation.

CVE-2014-3166

Antoine Delignat-Lavaud discovered an information leak in the SPDY protocol implementation.

CVE-2014-3167

The Google Chrome development team addressed multiple issues with potential security impact for chromium 36.0.1985.143.

CVE-2014-3168

cloudfuzzer discovered a use-after-free issue in SVG image file handling.

CVE-2014-3169

Andrzej Dyjak discovered a use-after-free issue in the Webkit/Blink Document Object Model implementation.

CVE-2014-3170

Rob Wu discovered a way to spoof the url of chromium extensions.

CVE-2014-3171

cloudfuzzer discovered a use-after-free issue in chromium's v8 bindings.

CVE-2014-3172

Eli Grey discovered a way to bypass access restrictions using chromium's Debugger extension API.

CVE-2014-3173

jmuizelaar discovered an uninitialized read issue in WebGL.

CVE-2014-3174

Atte Kettunen discovered an uninitialized read issue in Web Audio.

CVE-2014-3175

The Google Chrome development team addressed multiple issues with potential security impact for chromium 37.0.2062.94.

CVE-2014-3176

lokihardt@asrt discovered a combination of flaws that can lead to remote code execution outside of chromium's sandbox.

CVE-2014-3177

lokihardt@asrt discovered a combination of flaws that can lead to remote code execution outside of chromium's sandbox.

CVE-2014-3178

miaubiz discovered a use-after-free issue in the Document Object Model implementation in Blink/Webkit.

CVE-2014-3179

The Google Chrome development team addressed multiple issues with potential security impact for chromium 37.0.2062.120.

For the stable distribution (wheezy), these problems have been fixed in version 37.0.2062.120-1~deb7u1.

For the testing (jessie) and unstable (sid) distributions, these problems have been fixed in version 37.0.2062.120-1.

We recommend that you upgrade your chromium-browser packages.

Original Source

Url : http://www.debian.org/security/2014/dsa-3039

CWE : Common Weakness Enumeration

% Id Name
43 % CWE-264 Permissions, Privileges, and Access Controls
29 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
29 % CWE-94 Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:24782
 
Oval ID: oval:org.mitre.oval:def:24782
Title: Vulnerability in Google Chrome before 36.0.1985.125, allow attackers to cause a denial of service or possibly have other impact
Description: Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3162
Version: 4
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:24855
 
Oval ID: oval:org.mitre.oval:def:24855
Title: Vulnerability in Google Chrome before 36.0.1985.125, allows remote attackers to bypass the Same Origin Policy via a crafted file
Description: The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3160
Version: 4
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:25510
 
Oval ID: oval:org.mitre.oval:def:25510
Title: Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143
Description: Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an unexpectedly long lifetime of a temporary object during method completion.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3165
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:25735
 
Oval ID: oval:org.mitre.oval:def:25735
Title: The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation
Description: The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3172
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:25970
 
Oval ID: oval:org.mitre.oval:def:25970
Title: Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors
Description: Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3167
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26033
 
Oval ID: oval:org.mitre.oval:def:26033
Title: The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer
Description: The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3173
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26114
 
Oval ID: oval:org.mitre.oval:def:26114
Title: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8
Description: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3177
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26311
 
Oval ID: oval:org.mitre.oval:def:26311
Title: The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows does not correctly consider the properties of SPDY connections
Description: The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3166
Version: 4
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26339
 
Oval ID: oval:org.mitre.oval:def:26339
Title: extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name
Description: extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3170
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26543
 
Oval ID: oval:org.mitre.oval:def:26543
Title: Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94
Description: Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3169
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26585
 
Oval ID: oval:org.mitre.oval:def:26585
Title: modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients
Description: modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3174
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26624
 
Oval ID: oval:org.mitre.oval:def:26624
Title: USN-2320-1 -- oxide-qt vulnerabilities
Description: Several security issues were fixed in Oxide.
Family: unix Class: patch
Reference(s): USN-2320-1
CVE-2014-3165
CVE-2014-3166
CVE-2014-3167
Version: 3
Platform(s): Ubuntu 14.04
Product(s): oxide-qt
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26639
 
Oval ID: oval:org.mitre.oval:def:26639
Title: Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors
Description: Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3175
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26647
 
Oval ID: oval:org.mitre.oval:def:26647
Title: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8
Description: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3176
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26672
 
Oval ID: oval:org.mitre.oval:def:26672
Title: Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94
Description: Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3168
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26678
 
Oval ID: oval:org.mitre.oval:def:26678
Title: USN-2326-1 -- oxide-qt vulnerabilities
Description: Several security issues were fixed in Oxide.
Family: unix Class: patch
Reference(s): USN-2326-1
CVE-2014-3168
CVE-2014-3169
CVE-2014-3171
CVE-2014-3173
CVE-2014-3174
CVE-2014-3175
Version: 3
Platform(s): Ubuntu 14.04
Product(s): oxide-qt
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26727
 
Oval ID: oval:org.mitre.oval:def:26727
Title: Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94
Description: Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.
Family: windows Class: vulnerability
Reference(s): CVE-2014-3171
Version: 3
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Product(s): Google Chrome
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26960
 
Oval ID: oval:org.mitre.oval:def:26960
Title: DSA-3039-1 chromium-browser - security update
Description: Several vulnerabilities were discovered in the chromium web browser.
Family: unix Class: patch
Reference(s): DSA-3039-1
CVE-2014-3160
CVE-2014-3162
CVE-2014-3165
CVE-2014-3166
CVE-2014-3167
CVE-2014-3168
CVE-2014-3169
CVE-2014-3170
CVE-2014-3171
CVE-2014-3172
CVE-2014-3173
CVE-2014-3174
CVE-2014-3175
CVE-2014-3176
CVE-2014-3177
CVE-2014-3178
CVE-2014-3179
Version: 3
Platform(s): Debian GNU/Linux 7.0
Debian GNU/kFreeBSD 7.0
Product(s): chromium-browser
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 3904
Os 2
Os 3
Os 2

Information Assurance Vulnerability Management (IAVM)

Date Description
2014-07-24 IAVM : 2014-B-0100 - Multiple Security Vulnerabilities in Google Chrome
Severity : Category I - VMSKEY : V0053311

Nessus® Vulnerability Scanner

Date Description
2014-11-17 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-634.nasl - Type : ACT_GATHER_INFO
2014-10-15 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2345-1.nasl - Type : ACT_GATHER_INFO
2014-09-30 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3039.nasl - Type : ACT_GATHER_INFO
2014-09-23 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-550.nasl - Type : ACT_GATHER_INFO
2014-09-22 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201409-06.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_36a415c8386711e4b52200262d5ed8ee.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote Mac OS X host contains a web browser that is affected by multiple ...
File : macosx_google_chrome_37_0_2062_120.nasl - Type : ACT_GATHER_INFO
2014-09-10 Name : The remote host contains a web browser that is affected by multiple vulnerabi...
File : google_chrome_37_0_2062_120.nasl - Type : ACT_GATHER_INFO
2014-09-03 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2326-1.nasl - Type : ACT_GATHER_INFO
2014-08-30 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201408-16.nasl - Type : ACT_GATHER_INFO
2014-08-27 Name : The remote Mac OS X host contains a web browser that is affected by multiple ...
File : macosx_google_chrome_37_0_2062_94.nasl - Type : ACT_GATHER_INFO
2014-08-27 Name : The remote host contains a web browser that is affected by multiple vulnerabi...
File : google_chrome_37_0_2062_94.nasl - Type : ACT_GATHER_INFO
2014-08-27 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_fd5f305d2d3d11e4aa3d00262d5ed8ee.nasl - Type : ACT_GATHER_INFO
2014-08-21 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2320-1.nasl - Type : ACT_GATHER_INFO
2014-08-14 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_df7754c0229411e4b505000c6e25e3e9.nasl - Type : ACT_GATHER_INFO
2014-08-13 Name : The remote Mac OS X host contains a web browser that is affected by multiple ...
File : macosx_google_chrome_36_0_1985_143.nasl - Type : ACT_GATHER_INFO
2014-08-13 Name : The remote host contains a web browser that is affected by multiple vulnerabi...
File : google_chrome_36_0_1985_143.nasl - Type : ACT_GATHER_INFO
2014-08-12 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-483.nasl - Type : ACT_GATHER_INFO
2014-07-24 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2298-1.nasl - Type : ACT_GATHER_INFO
2014-07-18 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_3718833e0d2711e489db000c6e25e3e9.nasl - Type : ACT_GATHER_INFO
2014-07-17 Name : The remote host contains a web browser that is affected by multiple vulnerabi...
File : google_chrome_36_0_1985_125.nasl - Type : ACT_GATHER_INFO
2014-07-17 Name : The remote Mac OS X host contains a web browser that is affected by multiple ...
File : macosx_google_chrome_36_0_1985_125.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2014-10-01 13:27:25
  • Multiple Updates
2014-09-29 00:24:13
  • First insertion