Detections
Analytics

FreeBSD : chromium -- multiple vulnerabilities (9dd47fa3-9d53-11e3-b20f-00262d5ed8ee)

high Nessus Plugin ID 72676

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Google Chrome Releases reports :

28 security fixes in this release, including :

- [334897] High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid.

- [331790] High CVE-2013-6653: Use-after-free related to web contents.
Credit to Khalil Zhani.

- [333176] High CVE-2013-6654: Bad cast in SVG. Credit to TheShow3511.

- [293534] High CVE-2013-6655: Use-after-free in layout. Credit to cloudfuzzer.

- [331725] High CVE-2013-6656: Information leak in XSS auditor. Credit to NeexEmil.

- [331060] Medium CVE-2013-6657: Information leak in XSS auditor.
Credit to NeexEmil.

- [322891] Medium CVE-2013-6658: Use-after-free in layout. Credit to cloudfuzzer.

- [306959] Medium CVE-2013-6659: Issue with certificates validation in TLS handshake. Credit to Antoine Delignat-Lavaud and Karthikeyan Bhargavan from Prosecco, Inria Paris.

- [332579] Low CVE-2013-6660: Information leak in drag and drop.
Credit to bishopjeffreys.

- [344876] Low-High CVE-2013-6661: Various fixes from internal audits, fuzzing and other initiatives. Of these, seven are fixes for issues that could have allowed for sandbox escapes from compromised renderers.

Solution

Update the affected package.

See Also

http://googlechromereleases.blogspot.nl/

http://www.nessus.org/u?65ed3ecf

Plugin Details

Severity: High

ID: 72676

File Name: freebsd_pkg_9dd47fa39d5311e3b20f00262d5ed8ee.nasl

Version: 1.5

Type: local

Published: 2/25/2014

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:chromium, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2/24/2014

Vulnerability Publication Date: 2/20/2014

Reference Information

CVE: CVE-2013-6652, CVE-2013-6653, CVE-2013-6654, CVE-2013-6655, CVE-2013-6656, CVE-2013-6657, CVE-2013-6658, CVE-2013-6659, CVE-2013-6660, CVE-2013-6661