Test ID:	1.3.6.1.4.1.25623.1.0.841952
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2326-1)
Summary:	The remote host is missing an update for the 'oxide-qt' package(s) announced via the USN-2326-1 advisory.
Description:	Summary: The remote host is missing an update for the 'oxide-qt' package(s) announced via the USN-2326-1 advisory. Vulnerability Insight: A use-after-free was discovered in the SVG implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. (CVE-2014-3168) A use-after-free was discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. (CVE-2014-3169) A use-after-free was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. (CVE-2014-3171) It was discovered that WebGL clear calls did not interact properly with the state of a draw buffer. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. (CVE-2014-3173) A threading issue was discovered in the Web Audio API during attempts to update biquad filter coefficients. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. (CVE-2014-3174) Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking the program. (CVE-2014-3175) Affected Software/OS: 'oxide-qt' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3168 BugTraq ID: 69398 http://www.securityfocus.com/bid/69398 Debian Security Information: DSA-3039 (Google Search) http://www.debian.org/security/2014/dsa-3039 http://security.gentoo.org/glsa/glsa-201408-16.xml http://www.securitytracker.com/id/1030767 http://secunia.com/advisories/60268 http://secunia.com/advisories/60424 http://secunia.com/advisories/61482 SuSE Security Announcement: openSUSE-SU-2014:1151 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html XForce ISS Database: google-chrome-cve20143168-code-exec(95468) https://exchange.xforce.ibmcloud.com/vulnerabilities/95468 Common Vulnerability Exposure (CVE) ID: CVE-2014-3169 BugTraq ID: 69405 http://www.securityfocus.com/bid/69405 XForce ISS Database: google-chrome-cve20143169-code-exec(95469) https://exchange.xforce.ibmcloud.com/vulnerabilities/95469 Common Vulnerability Exposure (CVE) ID: CVE-2014-3171 BugTraq ID: 69406 http://www.securityfocus.com/bid/69406 XForce ISS Database: google-chrome-cve20143171-code-exec(95471) https://exchange.xforce.ibmcloud.com/vulnerabilities/95471 Common Vulnerability Exposure (CVE) ID: CVE-2014-3173 BugTraq ID: 69403 http://www.securityfocus.com/bid/69403 XForce ISS Database: google-chrome-cve20143173-info-disc(95473) https://exchange.xforce.ibmcloud.com/vulnerabilities/95473 Common Vulnerability Exposure (CVE) ID: CVE-2014-3174 BugTraq ID: 69407 http://www.securityfocus.com/bid/69407 XForce ISS Database: google-chrome-cve20143174-info-disc(95474) https://exchange.xforce.ibmcloud.com/vulnerabilities/95474 Common Vulnerability Exposure (CVE) ID: CVE-2014-3175 BugTraq ID: 69402 http://www.securityfocus.com/bid/69402 XForce ISS Database: google-chrome-cve20143175-unspec(95475) https://exchange.xforce.ibmcloud.com/vulnerabilities/95475
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.