Summary
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via application
crash, or execute arbitrary code. (CVE-2016-5170)
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via application
crash, or execute arbitrary code. (CVE-2016-5171)
An issue was discovered in V8. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
ontain sensitive information from arbitrary memory locations.
(CVE-2016-5172)
Multiple security issues were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to read uninitialized memory, cause a denial
of service via application crash, or execute arbitrary code.
(CVE-2016-5175, CVE-2016-5178)
A use-after-free was discovered in V8. If a user were tricked in to
opening a specially crafted website, an attacker could potentially
exploit this to cause a denial of service via application crash, or
execute arbitrary code. (CVE-2016-5177)
It was discovered that Chromium does not ensure the recipient of a certain
IPC message is a valid RenderFrame or RenderWidget. An attacker could
potentially exploit this to cause a denial of service via application
crash, or execute arbitary code. (CVE-2016-7549)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | oxide-qt | 1.17.9-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | oxide-qt | 1.17.9-0ubuntu0.16.04.1 |
Vulnerabilities 7
-
Unscored —
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does…
-
Unscored —
WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not preven…
-
Unscored —
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attacker…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service…
-
Unscored —
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of s…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of …
-
Unscored —
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame o…
References
-
report
https://ubuntu.com/security/CVE-2016-5170
-
report
https://ubuntu.com/security/CVE-2016-5171
-
report
https://ubuntu.com/security/CVE-2016-5172
-
report
https://ubuntu.com/security/CVE-2016-5175
-
report
https://ubuntu.com/security/CVE-2016-5177
-
report
https://ubuntu.com/security/CVE-2016-5178
-
report
https://ubuntu.com/security/CVE-2016-7549