Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Debian: DSA-3601-1 Crucial: Firefox Browser Memory Corruption Issue

debian
Calendar Grey June 1, 2016
Scroller Debian
Important security patch for chromium-browser resolves several weaknesses. Update immediately to safeguard your device.
Several vulnerabilities have been discovered in the chromium web browser
Topics%20covered

Topics Covered

security advisory critical debian web browser bypass cross-origin chromium

Summary

CVE-2016-1667

Mariusz Mylinski discovered a cross-origin bypass.

CVE-2016-1668

Mariusz Mylinski discovered a cross-origin bypass in bindings to v8.

CVE-2016-1669

Choongwoo Han discovered a buffer overflow in the v8 javascript
library.

CVE-2016-1670

A race condition was found that could cause the renderer process
to reuse ids that should have been unique.

CVE-2016-1672

Mariusz Mylinski discovered a cross-origin bypass in extension
bindings.

CVE-2016-1673

Mariusz Mylinski discovered a cross-origin bypass in Blink/Webkit.

CVE-2016-1674

Mariusz Mylinski discovered another cross-origin bypass in extension
bindings.

CVE-2016-1675

Mariusz Mylinski discovered another cross-origin bypass in
Blink/Webkit.

CVE-2016-1676

Rob Wu discovered a cross-origin bypass in extension bindings.

CVE-2016-1677

Guang Gong discovered a type confusion issue in the v8 javascript
library.

CVE-2016-1678

Christian Holler discovered an overflow issue in the v8 javascript
l...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: chromium-browser
CVE ID: CVE-2016-1667 CVE-2016-1668 CVE-2016-1669 CVE-2016-1670

Topics%20covered

Topics Covered

security advisory critical debian web browser bypass cross-origin chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.