Summary
Multiple vulnerabilities were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to obtain sensitive information, spoof
application UI by causing the security status API or webview URL to
indicate the wrong values, bypass security restrictions, cause a denial
of service via application crash, or execute arbitrary code.
(CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,
CVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044,
CVE-2017-5045, CVE-2017-5046)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | oxide-qt | 1.21.5-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | oxide-qt | 1.21.5-0ubuntu0.16.04.1 |
Vulnerabilities 11
-
High 8.8
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…
KEV Jun 8, 2022 -
High 8.8
Nokogiri implementation of libxslt lacks integer overflow checks
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a …
-
Unscored —
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an ou…
-
Unscored —
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correc…
-
Unscored —
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incor…
-
Unscored —
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for …
-
Unscored —CVE-2017-5040 EPSS 27%
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neute…
-
Unscored —
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to di…
-
Unscored —
Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux an…
-
Unscored —
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed de…
-
Unscored —
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient po…
References
-
report
https://ubuntu.com/security/CVE-2017-5029
-
report
https://ubuntu.com/security/CVE-2017-5030
-
report
https://ubuntu.com/security/CVE-2017-5031
-
report
https://ubuntu.com/security/CVE-2017-5033
-
report
https://ubuntu.com/security/CVE-2017-5035
-
report
https://ubuntu.com/security/CVE-2017-5037
-
report
https://ubuntu.com/security/CVE-2017-5040
-
report
https://ubuntu.com/security/CVE-2017-5041
-
report
https://ubuntu.com/security/CVE-2017-5044
-
report
https://ubuntu.com/security/CVE-2017-5045
-
report
https://ubuntu.com/security/CVE-2017-5046