| Description: | Summary:
The remote host is missing an update for the 'chromium-browser-stable' package(s) announced via the MGASA-2016-0309 advisory.
Vulnerability Insight:
Blink, as used in Chromium before 53.0.2785.89 on Windows and OS X and
before 53.0.2785.92 on Linux, mishandles deferred page loads, which
allows remote attackers to inject arbitrary web script or HTML via a
crafted web site, aka 'Universal XSS (UXSS).' (CVE-2016-5147)
Cross-site scripting (XSS) vulnerability in Blink, as used in Chromium
before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on
Linux, allows remote attackers to inject arbitrary web script or HTML
via vectors related to widget updates, aka 'Universal XSS (UXSS).'
(CVE-2016-5148)
The extensions subsystem in Chromium before 53.0.2785.89 on Windows and
OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to
identify an associated extension, which allows remote attackers to
conduct extension-bindings injection attacks by leveraging script access
to a resource that initially has the about:blank URL. (CVE-2016-5149)
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as
used in Chromium before 53.0.2785.89 on Windows and OS X and before
53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API
implementation that does not properly restrict key-path evaluation,
which allows remote attackers to cause a denial of service
(use-after-free) or possibly have unspecified other impact via crafted
JavaScript code that leverages certain side effects. (CVE-2016-5150)
PDFium in Chromium before 53.0.2785.89 on Windows and OS X and before
53.0.2785.92 on Linux mishandles timers, which allows remote attackers
to cause a denial of service (use-after-free) or possibly have
unspecified other impact via a crafted PDF document, related to
fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.
(CVE-2016-5151)
Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c
in OpenJPEG, as used in PDFium in Chromium before 53.0.2785.89 on
Windows and OS X and before 53.0.2785.92 on Linux, allows remote
attackers to cause a denial of service (heap-based buffer overflow) or
possibly have unspecified other impact via crafted JPEG 2000 data.
(CVE-2016-5152)
The Web Animations implementation in Blink, as used in Chromium before
53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux,
improperly relies on list iteration, which allows remote attackers to
cause a denial of service (use-after-destruction) or possibly have
unspecified other impact via a crafted web site. (CVE-2016-5153)
Multiple heap-based buffer overflows in PDFium, as used in Chromium
before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on
Linux, allow remote attackers to cause a denial of service or possibly
have unspecified other impact via a crafted JBig2 image. (CVE-2016-5154)
Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92
on Linux does not properly validate access to the initial document,
which allows remote attackers to spoof the address bar via a ... [Please see the references for more information on the vulnerabilities]
Affected Software/OS:
'chromium-browser-stable' package(s) on Mageia 5.
Solution:
Please install the updated package(s).
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
