chromium-browser - several

Fixed packages 1

Vulnerabilities 13

• Unscored —
  CVE-2013-2853

  The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (…

  Jul 10, 2013
• Unscored —
  CVE-2013-2867

  Google Chrome before 28.0.1500.71 does not properly prevent pop-under windows, which allows remote attackers to have an…

  Jul 10, 2013
• Unscored —
  CVE-2013-2868

  common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extension…

  Jul 10, 2013
• Unscored —
  CVE-2013-2869

  Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via a craft…

  Jul 10, 2013
• Unscored —
  CVE-2013-2870

  Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote servers to execute arbitrary code via c…

  Jul 10, 2013
• Unscored —
  CVE-2013-2871

  Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service …

  Jul 10, 2013
• Unscored —
  CVE-2013-2873

  Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service …

  Jul 10, 2013
• Unscored —
  CVE-2013-2875

  core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.7…

  Jul 10, 2013
• Unscored —
  CVE-2013-2876

  browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on …

  Jul 10, 2013
• Unscored —
  CVE-2013-2877

  parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attack…

  libxml2 Debian
  Jul 10, 2013
• Unscored —
  CVE-2013-2878

  Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors…

  Jul 10, 2013
• Unscored —
  CVE-2013-2879

  Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be cons…

  Jul 10, 2013
• Unscored —
  CVE-2013-2880

  Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to cause a denial of service …

  Jul 10, 2013