Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Debian DSA-2920-1 Critical: Chromium Browser Type Confusions Exploited

debian
Calendar Grey May 3, 2014
Scroller Debian
The security bulletin DSA-2920-2 highlights various updates to the chromium-browser package, rectifying multiple vulnerabilities of significant concern.
Several vulnerabilities have been discovered in the chromium web browser
Topics%20covered

Topics Covered

security advisory security issue critical debian web browser chromium type confusion

Summary

CVE-2014-1730

A type confusion issue was discovered in the v8 javascript library.

CVE-2014-1731

John Butler discovered a type confusion issue in the WebKit/Blink
document object model implementation.

CVE-2014-1732

Khalil Zhani discovered a use-after-free issue in the speech
recognition feature.

CVE-2014-1733

Jed Davis discovered a way to bypass the seccomp-bpf sandbox.

CVE-2014-1734

The Google Chrome development team discovered and fixed multiple
issues with potential security impact.

CVE-2014-1735

The Google Chrome development team discovered and fixed multiple
issues in version 3.24.35.33 of the v8 javascript library.

CVE-2014-1736

SkyLined discovered an integer overlflow issue in the v8 javascript
library.

For the stable distribution (wheezy), these problems have been fixed in
version 34.0.1847.132-1~deb7u1.

For the testing distribution (jessie), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
vers...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: chromium-browser
CVE ID: CVE-2014-1730 CVE-2014-1731 CVE-2014-1732 CVE-2014-1733

Topics%20covered

Topics Covered

security advisory security issue critical debian web browser chromium type confusion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.