[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4352-1 chromium-browser -- chromium-browser

ID: oval:org.secpod.oval:def:603586Date: (C)2018-12-10   (M)2023-11-13
Class: PATCHFamily: unix




Several vulnerabilities have been discovered in the chromium web browser. CVE-2018-17480 Guang Gong discovered an out-of-bounds write issue in the v8 javascript library. CVE-2018-17481 Several use-after-free issues were discovered in the pdfium library. CVE-2018-18335 A buffer overflow issue was discovered in the skia library. CVE-2018-18336 Huyna discovered a use-after-free issue in the pdfium library. CVE-2018-18337 cloudfuzzer discovered a use-after-free issue in blink/webkit. CVE-2018-18338 Zhe Jin discovered a buffer overflow issue in the canvas renderer. CVE-2018-18339 cloudfuzzer discovered a use-after-free issue in the WebAudio implementation. CVE-2018-18340 A use-after-free issue was discovered in the MediaRecorder implementation. CVE-2018-18341 cloudfuzzer discovered a buffer overflow issue in blink/webkit. CVE-2018-18342 Guang Gong discovered an out-of-bounds write issue in the v8 javascript library. CVE-2018-18343 Tran Tien Hung discovered a use-after-free issue in the skia library. CVE-2018-18344 Jann Horn discovered an error in the Extensions implementation. CVE-2018-18345 Masato Kinugawa and Jun Kokatsu discovered an error in the Site Isolation feature. CVE-2018-18346 Luan Herrera discovered an error in the user interface. CVE-2018-18347 Luan Herrera discovered an error in the Navigation implementation. CVE-2018-18348 Ahmed Elsobky discovered an error in the omnibox implementation. CVE-2018-18349 David Erceg discovered a policy enforcement error. CVE-2018-18350 Jun Kokatsu discovered a policy enforcement error. CVE-2018-18351 Jun Kokatsu discovered a policy enforcement error. CVE-2018-18352 Jun Kokatsu discovered an error in Media handling. CVE-2018-18353 Wenxu Wu discovered an error in the network authentication implementation. CVE-2018-18354 Wenxu Wu discovered an error related to integration with GNOME Shell. CVE-2018-18355 evil1m0 discovered a policy enforcement error. CVE-2018-18356 Tran Tien Hung discovered a use-after-free issue in the skia library. CVE-2018-18357 evil1m0 discovered a policy enforcement error. CVE-2018-18358 Jann Horn discovered a policy enforcement error. CVE-2018-18359 cyrilliu discovered an out-of-bounds read issue in the v8 javascript library. Several additional security relevant issues are also fixed in this update that have not yet received CVE identifiers.

Platform:
Debian 9.x
Product:
chromedriver
chromium
Reference:
DSA-4352-1
CVE-2018-17480
CVE-2018-17481
CVE-2018-18335
CVE-2018-18336
CVE-2018-18337
CVE-2018-18338
CVE-2018-18339
CVE-2018-18340
CVE-2018-18341
CVE-2018-18342
CVE-2018-18343
CVE-2018-18344
CVE-2018-18345
CVE-2018-18346
CVE-2018-18347
CVE-2018-18348
CVE-2018-18349
CVE-2018-18350
CVE-2018-18351
CVE-2018-18352
CVE-2018-18353
CVE-2018-18354
CVE-2018-18355
CVE-2018-18356
CVE-2018-18357
CVE-2018-18358
CVE-2018-18359
CVE-2018-20066
CVE-2018-20065
CVE-2018-20346
CVE-2018-20070
CVE-2018-20068
CVE-2018-20067
CVE    33
CVE-2018-18355
CVE-2018-18354
CVE-2018-18353
CVE-2018-18352
...
CPE    4
cpe:/o:debian:debian_linux:9.0
cpe:/o:debian:debian_linux:8.0
cpe:/a:google:chromium
cpe:/o:debian:debian_linux:9.x
...

© SecPod Technologies