| Summary: | <www-client/chromium-16.0.912.75: Multiple vulnerabilities (CVE-2011-{3921,3922}) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Paweł Hajdan, Jr. (RETIRED) <phajdan.jr> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | chromium |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html | ||
| Whiteboard: | B2 [glsa] | ||
| Package list: | Runtime testing required: | --- | |
|
Description
Paweł Hajdan, Jr. (RETIRED)
2012-01-06 15:53:56 UTC
x86 stable amd64 stable Thanks, everyone. Already added to a GLSA request. This issue was resolved and addressed in GLSA 201201-03 at http://security.gentoo.org/glsa/glsa-201201-03.xml by GLSA coordinator Tim Sammut (underling). CVE-2011-3922 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3922): Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling. CVE-2011-3921 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3921): Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames. |
