Lucene search

K
osvGoogleOSV:DSA-2732-1
HistoryJul 31, 2013 - 12:00 a.m.

chromium-browser - several

2013-07-3100:00:00
Google
osv.dev
21

EPSS

0.021

Percentile

89.3%

Several vulnerabilities have been discovered in the Chromium web browser.

  • CVE-2013-2881
    Karthik Bhargavan discovered a way to bypass the Same Origin Policy
    in frame handling.
  • CVE-2013-2882
    Cloudfuzzer discovered a type confusion issue in the V8 javascript
    library.
  • CVE-2013-2883
    Cloudfuzzer discovered a use-after-free issue in MutationObserver.
  • CVE-2013-2884
    Ivan Fratric of the Google Security Team discovered a use-after-free
    issue in the DOM implementation.
  • CVE-2013-2885
    Ivan Fratric of the Google Security Team discovered a use-after-free
    issue in input handling.
  • CVE-2013-2886
    The chrome 28 development team found various issues from internal
    fuzzing, audits, and other studies.

For the stable distribution (wheezy), these problems have been fixed in
version 28.0.1500.95-1~deb7u1.

For the testing distribution (jessie), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
version 28.0.1500.95-1.

We recommend that you upgrade your chromium-browser packages.