Skip to content
OpenAdvisories
Unscored DSA-2883-1 23 CVEs

chromium-browser - security update

Published Mar 23, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 chromium-browser 33.0.1750.152-1~deb7u1

Vulnerabilities 23

  • Unscored —

    Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote att…

  • Unscored —

    The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Ch…

  • Unscored —

    Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause …

  • Unscored —

    The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome …

  • Unscored —

    core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the…

  • Unscored —

    Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.175…

  • Unscored —

    The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome befor…

  • Unscored —

    The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in We…

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protec…

  • Unscored —

    Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG im…

  • Unscored —

    Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElem…

  • Unscored —

    Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in…

  • Unscored —

    The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome befo…

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service…

  • Unscored —
    CVE-2013-6668 Public exploit

    Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, all…

  • Unscored —

    Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.…

  • Unscored —

    The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1…

  • Unscored —

    Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThrea…

  • Unscored —

    Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/webso…

  • Unscored —

    Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, all…

  • Unscored —

    Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows …

  • Unscored —

    Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Bl…

  • Unscored —

    Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on W…