Debian Security Advisory

DSA-2811-1 chromium-browser -- several vulnerabilities

Date Reported:
07 Dec 2013
Affected Packages:
chromium-browser
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2013-6634, CVE-2013-6635, CVE-2013-6636, CVE-2013-6637, CVE-2013-6638, CVE-2013-6639, CVE-2013-6640.
More information:

Several vulnerabilities have been discovered in the chromium web browser.

  • CVE-2013-6634

    Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper.

  • CVE-2013-6635

    cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing commands.

  • CVE-2013-6636

    Bas Venis discovered an address bar spoofing issue.

  • CVE-2013-6637

    The chrome 31 development team discovered and fixed multiple issues with potential security impact.

  • CVE-2013-6638

    Jakob Kummerow of the Chromium project discovered a buffer overflow in the v8 javascript library.

  • CVE-2013-6639

    Jakob Kummerow of the Chromium project discovered an out-of-bounds write in the v8 javascript library.

  • CVE-2013-6640

    Jakob Kummerow of the Chromium project discovered an out-of-bounds read in the v8 javascript library.

For the stable distribution (wheezy), these problems have been fixed in version 31.0.1650.63-1~deb7u1.

For the testing distribution (jessie), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in version 31.0.1650.63-1.

We recommend that you upgrade your chromium-browser packages.