Summary
Multiple vulnerabilities were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to conduct cross-site scripting (XSS) attacks,
read uninitialized memory, obtain sensitive information, spoof the
webview URL or other UI components, bypass same origin restrictions or
other security restrictions, cause a denial of service via application
crash, or execute arbitrary code. (CVE-2017-5006, CVE-2017-5007,
CVE-2017-5008, CVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012,
CVE-2017-5014, CVE-2017-5017, CVE-2017-5019, CVE-2017-5022, CVE-2017-5023,
CVE-2017-5024, CVE-2017-5025, CVE-2017-5026)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | oxide-qt | 1.20.4-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | oxide-qt | 1.20.4-0ubuntu0.16.04.1 |
Vulnerabilities 15
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly hand…
-
Unscored —CVE-2017-5007 Public exploit
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly hand…
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker…
-
Unscored —
WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perfo…
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promise…
-
Unscored —
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker…
-
Unscored —
A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for An…
-
Unscored —
Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac,…
-
Unscored —
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allo…
-
Unscored —
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allow…
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to proper…
-
Unscored —
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for And…
-
Unscored —
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, whi…
-
Unscored —
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, whi…
-
Unscored —
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swappe…
References
-
report
https://ubuntu.com/security/CVE-2017-5006
-
report
https://ubuntu.com/security/CVE-2017-5007
-
report
https://ubuntu.com/security/CVE-2017-5008
-
report
https://ubuntu.com/security/CVE-2017-5009
-
report
https://ubuntu.com/security/CVE-2017-5010
-
report
https://ubuntu.com/security/CVE-2017-5011
-
report
https://ubuntu.com/security/CVE-2017-5012
-
report
https://ubuntu.com/security/CVE-2017-5014
-
report
https://ubuntu.com/security/CVE-2017-5017
-
report
https://ubuntu.com/security/CVE-2017-5019
-
report
https://ubuntu.com/security/CVE-2017-5022
-
report
https://ubuntu.com/security/CVE-2017-5023
-
report
https://ubuntu.com/security/CVE-2017-5024
-
report
https://ubuntu.com/security/CVE-2017-5025
-
report
https://ubuntu.com/security/CVE-2017-5026