| Description: | Summary:
The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2013-0324 advisory.
Vulnerability Insight:
Updated chromium-browser-stable packages fix security vulnerabilities:
Various fixes from internal audits, fuzzing and other initiatives
(CVE-2013-2931).
Use after free related to speech input elements (CVE-2013-6621).
Use after free related to media elements (CVE-2013-6622).
Out of bounds read in SVG (CVE-2013-6623).
Use after free related to 'id' attribute strings (CVE-2013-6624).
Use after free in DOM ranges (CVE-2013-6625).
Address bar spoofing related to interstitial warnings (CVE-2013-6626).
Out of bounds read in HTTP parsing (CVE-2013-6627).
Issue with certificates not being checked during TLS renegotiation
(CVE-2013-6628).
libjpeg 6b and libjpeg-turbo will use uninitialized memory when decoding
images with missing SOS data for the luminance component (Y) in presence of
valid chroma data (Cr, Cb) (CVE-2013-6629).
libjpeg-turbo will use uninitialized memory when handling Huffman tables
(CVE-2013-6630).
Use after free in libjingle (CVE-2013-6631).
Affected Software/OS:
'chromium-browser-stable' package(s) on Mageia 2, Mageia 3.
Solution:
Please install the updated package(s).
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
