DSA-2939-1: Chromium-Browser Security Update
Summary
DSA-2939-1: chromium-browser - security update. Affects chromium-browser versions < 35.0.1916.114-1~deb7u2. Fixed in 35.0.1916.114-1~deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser project that serves as the foundation for several popular browsers, including Google Chrome. It provides users with a fast and secure browsing experience, leveraging the latest web technologies. However, several vulnerabilities have been discovered in the Chromium-Browser, which could potentially compromise user security and privacy.
Vulnerability Detail
The following vulnerabilities have been identified in the Chromium-Browser:
- CVE-2014-1743: A use-after-free issue in the Blink/Webkit document object model implementation, discovered by cloudfuzzer.
- CVE-2014-1744: An integer overflow issue in audio input handling, discovered by Aaron Staple.
- CVE-2014-1745: A use-after-free issue in the Blink/Webkit scalable vector graphics implementation, discovered by Atte Kettunen.
- CVE-2014-1746: An out-of-bounds read issue in the URL protocol implementation for handling media, discovered by Holger Fuhrmannek.
- CVE-2014-1747: A cross-site scripting issue involving malformed MHTML files, discovered by packagesu.
- CVE-2014-1748: A user interface spoofing issue, discovered by Jordan Milne.
- CVE-2014-1749: Multiple issues with potential security impact, discovered and fixed by the Google Chrome development team.
- CVE-2014-3152: An integer underflow issue in the v8 JavaScript library.
These vulnerabilities could allow attackers to execute arbitrary code, bypass security restrictions, or conduct cross-site scripting attacks.
How To Fix
Minimum fixed version
35.0.1916.114-1~deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromium-browserTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading your Chromium-Browser packages to the latest version is crucial to address the identified vulnerabilities and ensure the security of your browsing experience. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for chromium-browser →
FAQ
Chromium-Browser is an open-source web browser project that forms the basis for various popular browsers, including Google Chrome. It offers users a fast and secure browsing experience.
These vulnerabilities could allow attackers to execute arbitrary code, bypass security restrictions, or conduct cross-site scripting attacks, potentially compromising user security and privacy.
To fix these vulnerabilities, it is recommended to upgrade your Chromium-Browser packages to the latest available version.
No specific workarounds have been mentioned for these vulnerabilities. It is advised to upgrade to the latest version of Chromium-Browser.
For more information about these vulnerabilities, you can refer to the CVE identifiers provided in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for chromium-browser.
