Chromium was updated to the 33.0.1750.152 stable channel uodate :

  - Security fixes :

  - CVE-2014-1713: Use-after-free in Blink bindings

  - CVE-2014-1714: Windows clipboard vulnerability

  - CVE-2014-1705: Memory corruption in V8

  - CVE-2014-1715: Directory traversal issue

Previous stable channel update 33.0.1750.149 :

  - Security fixes :

  - CVE-2014-1700: Use-after-free in speech

  - CVE-2014-1701: UXSS in events

  - CVE-2014-1702: Use-after-free in web database

  - CVE-2014-1703: Potential sandbox escape due to a     use-after-free in web sockets

  - CVE-2014-1704: Multiple vulnerabilities in V8 fixed in     version 3.23.17.18

The remote host is affected by the vulnerability described in GLSA-201408-16 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could conduct a number of attacks which include: cross       site scripting attacks, bypassing of sandbox protection,  potential       execution of arbitrary code with the privileges of the process, or cause       a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Google Chrome Releases reports :

New vulnerabilities after the Pwn2Own competition :

- [352369] Code execution outside sandbox. Credit to VUPEN.

- [352374] High CVE-2014-1713: Use-after-free in Blink bindings

- [352395] High CVE-2014-1714: Windows clipboard vulnerability

- [352420] Code execution outside sandbox. Credit to Anonymous.

- [351787] High CVE-2014-1705: Memory corruption in V8

- [352429] High CVE-2014-1715: Directory traversal issue

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 33.0.1750.152. It is, therefore, affected by the following vulnerabilities :

  - A remote code-execution flaw exists due to a read/write     error with the a sandbox bypass, specifically the V8     JavaScript engine. This could allow an attacker to     execute code or cause a denial of service if the exploit     fails. (CVE-2014-1705)

  - A use-after-free flaw exists with the     'document.location' bindings. An attacker, using a     specially crafted web page, can dereference freed memory     and could execute arbitrary code. (CVE-2014-1713)

  - A flaw exists with the clipboard message filter. A     context-dependent attacker could bypass sandbox     restrictions. (CVE-2014-1714)

  - A restriction bypass flaw exists with the     'CreatePlatformFileUnsafe()' function in the     'base/platform_file_win.cc' where user input is not     properly sanitized. A context-dependent attacker could     open arbitrary directories bypassing sandbox     restrictions. (CVE-2014-1715)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote host is a version prior to 33.0.1750.154. It is, therefore, affected by the following vulnerabilities :

  - A remote code-execution flaw exists due to a read/write     error with the a sandbox bypass, specifically the V8     JavaScript engine. This could allow an attacker to     execute code or cause a denial of service if the exploit     fails. (CVE-2014-1705)

  - A use-after-free flaw exists with the     'document.location' bindings. An attacker, using a     specially crafted web page, can dereference freed memory     and could execute arbitrary code. (CVE-2014-1713)

  - A flaw exists with the clipboard message filter. A     context-dependent attacker could bypass sandbox     restrictions. (CVE-2014-1714)

  - A restriction bypass flaw exists with the     'CreatePlatformFileUnsafe()' function in the     'base/platform_file_win.cc' where user input is not     properly sanitized. A context-dependent attacker could     open arbitrary directories bypassing sandbox     restrictions. (CVE-2014-1715)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
75318	openSUSE Security Update : chromium (openSUSE-SU-2014:0501-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
77460	GLSA-201408-16 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/30/2014	1/6/2021	critical
73049	FreeBSD : www/chromium -- multiple vulnerabilities (a70966a1-ac22-11e3-8d04-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	3/17/2014	1/6/2021	high
73083	Google Chrome < 33.0.1750.152 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	3/18/2014	11/26/2019	high
73082	Google Chrome < 33.0.1750.154 Multiple Vulnerabilities	Nessus	Windows	3/18/2014	4/11/2022	high

Detections

Analytics

Plugins Search

critical

critical

high

high

high