Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 357963 - <www-client/chromium-10.0.648.127: multiple vulnerabilities<dev-lang/v8-3.0.12.30 (CVE-2011-{1185,1186,1187,1188,1189,1190,1191,1192,1193,1194,1195,1196,1197,1198,1199,1200,1201,1202,1203,1204,1285,1286,1413})
Summary: <www-client/chromium-10.0.648.127: multiple vulnerabilities<dev-lang/v8-3.0.1...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: http://googlechromereleases.blogspot....
Whiteboard: B2 [glsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-03-08 19:01 UTC by Paweł Hajdan, Jr. (RETIRED)
Modified: 2012-09-11 00:26 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-03-08 19:01:27 UTC
Release notes: http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html

At this moment we have no CVE numbers for the vulnerabilities described here.

Synopsis:

Multiple vulnerabilities have been reported in Chromium, some of which may
allow user-assisted execution of arbitrary code.

Impact:

A remote attacker could entice a user to visit a specially-crafted web page
that would trigger one of the vulnerabilities, leading to execution of
arbitrary code, a Denial of Service, same-origin policy bypass and information leaks.
Comment 1 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-03-08 19:03:54 UTC
Arches, please test and mark stable:

=www-client/chromium-10.0.648.127
=dev-lang/v8-3.0.12.30 (first time stabilization, the test suite should pass)
Comment 2 Agostino Sarubbo gentoo-dev 2011-03-08 23:18:28 UTC
amd64 ok
Comment 3 Markos Chandras (RETIRED) gentoo-dev 2011-03-08 23:30:15 UTC
amd64 done. Thanks Agostino
Comment 4 Agostino Sarubbo gentoo-dev 2011-03-09 09:26:42 UTC
ok on my x86
Comment 5 Christian Faulhammer (RETIRED) gentoo-dev 2011-03-13 11:03:14 UTC
x86 stable for a day...
Comment 6 Tim Sammut (RETIRED) gentoo-dev 2011-03-14 03:08:51 UTC
Thanks, folks. Added to existing GLSA request.
Comment 7 GLSAMaker/CVETool Bot gentoo-dev 2011-11-01 10:01:51 UTC
This issue was resolved and addressed in
 GLSA 201111-01 at http://security.gentoo.org/glsa/glsa-201111-01.xml
by GLSA coordinator Alex Legler (a3li).
Comment 8 GLSAMaker/CVETool Bot gentoo-dev 2011-11-01 10:02:53 UTC
This issue was resolved and addressed in
 GLSA 201111-01 at http://security.gentoo.org/glsa/glsa-201111-01.xml
by GLSA coordinator Alex Legler (a3li).
Comment 9 GLSAMaker/CVETool Bot gentoo-dev 2012-09-11 00:26:04 UTC
CVE-2011-1413 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1413):
  Google Chrome before 10.0.648.127 on Linux does not properly mitigate an
  unspecified flaw in an X server, which allows remote attackers to cause a
  denial of service (application crash) via vectors involving long messages.

CVE-2011-1286 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1286):
  Google V8, as used in Google Chrome before 10.0.648.127, allows remote
  attackers to cause a denial of service or possibly have unspecified other
  impact via unknown vectors that trigger incorrect access to memory.

CVE-2011-1285 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1285):
  The regular-expression functionality in Google Chrome before 10.0.648.127
  does not properly implement reentrancy, which allows remote attackers to
  cause a denial of service (memory corruption) or possibly have unspecified
  other impact via unknown vectors.

CVE-2011-1204 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1204):
  Google Chrome before 10.0.648.127 does not properly handle attributes, which
  allows remote attackers to cause a denial of service (DOM tree corruption)
  or possibly have unspecified other impact via a crafted document.

CVE-2011-1203 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1203):
  Google Chrome before 10.0.648.127 does not properly handle SVG cursors,
  which allows remote attackers to cause a denial of service or possibly have
  unspecified other impact via unknown vectors that lead to a "stale pointer."

CVE-2011-1202 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1202):
  The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and
  earlier, as used in Google Chrome before 10.0.648.127 and other products,
  allows remote attackers to obtain potentially sensitive information about
  heap memory addresses via an XML document containing a call to the XSLT
  generate-id XPath function.

CVE-2011-1201 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1201):
  The context implementation in WebKit, as used in Google Chrome before
  10.0.648.127, allows remote attackers to cause a denial of service or
  possibly have unspecified other impact via unknown vectors that lead to a
  "stale pointer."

CVE-2011-1200 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1200):
  Google Chrome before 10.0.648.127 does not properly perform a cast of an
  unspecified variable during text rendering, which allows remote attackers to
  cause a denial of service or possibly have unknown other impact via a
  crafted document.

CVE-2011-1199 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1199):
  Google Chrome before 10.0.648.127 does not properly handle DataView objects,
  which allows remote attackers to cause a denial of service (application
  crash) or possibly have unspecified other impact via unknown vectors.

CVE-2011-1198 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1198):
  The video functionality in Google Chrome before 10.0.648.127 allows remote
  attackers to cause a denial of service or possibly have unspecified other
  impact via unknown vectors that trigger use of a malformed "out-of-bounds
  structure."

CVE-2011-1197 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1197):
  Google Chrome before 10.0.648.127 does not properly perform table painting,
  which allows remote attackers to cause a denial of service or possibly have
  unspecified other impact via unknown vectors that lead to a "stale pointer."

CVE-2011-1196 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1196):
  The OGG container implementation in Google Chrome before 10.0.648.127 allows
  remote attackers to cause a denial of service or possibly have unspecified
  other impact via unknown vectors that trigger an out-of-bounds write.

CVE-2011-1195 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1195):
  Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows
  remote attackers to cause a denial of service or possibly have unspecified
  other impact via vectors related to "document script lifetime handling."

CVE-2011-1194 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1194):
  Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127
  allow remote attackers to bypass the pop-up blocker via unknown vectors.

CVE-2011-1193 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1193):
  Google V8, as used in Google Chrome before 10.0.648.127, allows remote
  attackers to bypass the Same Origin Policy via unspecified vectors.

CVE-2011-1192 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1192):
  Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode
  ranges, which allows remote attackers to cause a denial of service
  (out-of-bounds read) via unspecified vectors.

CVE-2011-1191 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1191):
  Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows
  remote attackers to cause a denial of service or possibly have unspecified
  other impact via vectors related to the handling of DOM URLs.

CVE-2011-1190 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1190):
  The Web Workers implementation in Google Chrome before 10.0.648.127 allows
  remote attackers to bypass the Same Origin Policy via unspecified vectors,
  related to an "error message leak."

CVE-2011-1189 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1189):
  Google Chrome before 10.0.648.127 does not properly perform box layout,
  which allows remote attackers to cause a denial of service or possibly have
  unspecified other impact via unknown vectors that lead to a "stale node."

CVE-2011-1188 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1188):
  Google Chrome before 10.0.648.127 does not properly handle counter nodes,
  which allows remote attackers to cause a denial of service (memory
  corruption) or possibly have unspecified other impact via unknown vectors.

CVE-2011-1187 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1187):
  Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same
  Origin Policy via unspecified vectors, related to an "error message leak."

CVE-2011-1186 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1186):
  Google Chrome before 10.0.648.127 on Linux does not properly handle parallel
  execution of calls to the print method, which might allow remote attackers
  to cause a denial of service (application crash) via crafted JavaScript
  code.

CVE-2011-1185 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1185):
  Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2)
  close operations on the top location of a sandboxed frame, which has
  unspecified impact and remote attack vectors.