Security update for Chromium and V8 to 18.0.1025.142. Following bugs are listed in the Chrome changelog : - [$500] [109574] Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa. - [$500] [112317] Medium CVE-2011-3059: Out-of-bounds read in SVG text handling. Credit to Arthur Gerkis. - [$500] [114056] Medium CVE-2011-3060: Out-of-bounds read in text fragment handling. Credit to miaubiz. - [116398 ] Medium CVE-2011-3061: SPDY proxy certificate checking error. Credit to Leonidas Kontothanassis of Google. - [116524 ] High CVE-2011-3062: Off-by-one in OpenType Sanitizer. Credit to Mateusz Jurczyk of the Google Security Team. - [117417 ] Low CVE-2011-3063: Validate navigation requests from the renderer more carefully. Credit to kuzzcc, Sergey Glazunov, PinkiePie and scarybeasts (Google Chrome Security Team). - [$1000] [117471] High CVE-2011-3064: Use-after-free in SVG clipping. Credit to Atte Kettunen of OUSPG. - [$1000] [117588] High CVE-2011-3065: Memory corruption in Skia. Credit to Omair. - [$500] [117794] Medium CVE-2011-3057: Invalid read in v8. Credit to Christian Holler. The bugs [112317], [114056 ] and [ 117471 ] were detected using AddressSanitizer . We'd also like to thank miaubiz, Chamal de Silva, Atte Kettunen of OUSPG, Aki Helin of OUSPG and Arthur Gerkis for working with us during the development cycle and preventing security regressions from ever reaching the stable channel. $8000 of additional rewards were issued for this awesomeness

ID	Name	Product	Family	Severity
74592	openSUSE Security Update : chromium (openSUSE-SU-2012:0492-1)	Nessus	SuSE Local Security Checks	critical
801018	Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)	Log Correlation Engine	Operating System Detection	high
6717	Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)	Nessus Network Monitor	Web Clients	high
65578	Mac OS X Multiple Vulnerabilities (Security Update 2013-001)	Nessus	MacOS X Local Security Checks	high
65577	Mac OS X 10.8.x < 10.8.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
6679	Apple iOS < 6.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
64287	Apple iOS < 6.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high
59616	GLSA-201203-24 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
800957	Google Chrome < 18.0.1025.142 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
58536	Google Chrome < 18.0.1025.142 Multiple Vulnerabilities	Nessus	Windows	high
58521	FreeBSD : chromium -- multiple vulnerabilities (b8f0a391-7910-11e1-8a43-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

CVE-2011-3058

Description

References

Details

Risk Information

CVSS v2.0