MGASA-2015-0182: chromium-browser-stable Mageia
CVSS: UnknownPublished
Published 03-05-2015Last modified 16-04-2026
Vulnerability summary
MGASA-2015-0182 is a vulnerability in chromium-browser-stable Mageia with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0Timeline
- 03-05-2015PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated chromium-browser-stable packages fix security vulnerabilities Chromium-browser 42.0.2311.135 fixes security issues: a use-after-free in DOM (CVE-2015-1243), and various fixes from internal audits, fuzzing and other initiatives (CVE-2015-1250).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia1 product
- chromium-browser-stable< 42.0.2311.135-1.mga4
1 vendor · 1 product
References
3 linksRelated vulnerabilities
MGASA-2015-0356mageiachromium-browser-stable+1Updated chromium-browser packages fix security vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities:
Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Chromium to crash or,
potentially, execute arbitrary code with the privileges of the user running
Chromium (CVE-2015-1291, CVE-2015-1292, CVE-2015-1293, CVE-2015-1294,
CVE-2015-1295, CVE-2015-1296, CVE-2015-1297, CVE-2015-1298, CVE-2015-1299,
CVE-2015-1300, CVE-2015-1301).MGASA-2015-0288mageiachromium-browser-stable+1Updated chromium-browser package fixes security vulnerabilities
Chromium-browser 44.0.2403.107 fixes several security issues:
PDFium, as used in Google Chrome before 44.0.2403.89, does not properly
handle certain out-of-memory conditions, which allows remote attackers to
cause a denial of service (heap-based buffer overflow) or possibly have
unspecified other impact via a crafted PDF document that triggers a large
memory allocation. (CVE-2015-1271)
Use-after-free vulnerability in the GPU process implementation in Google
Chrome before 44.0.2403.89 allows remote attackers to cause a denial of
service or possibly have unspecified other impact by leveraging the
continued availability of a GPUChannelHost data structure during Blink
shutdown, related to
content/browser/gpu/browser_gpu_channel_host_factory.cc and
content/renderer/render_thread_impl.cc. (CVE-2015-1272)
Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in
PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to
cause a denial of service or possibly have unspecified other impact via
invalid JPEG2000 data in a PDF document. (CVE-2015-1273)
Google Chrome before 44.0.2403.89 does not ensure that the auto-open list
omits all dangerous file types, which makes it easier for remote attackers
to execute arbitrary code by providing a crafted file and leveraging a
user's previous "Always open files of this type" choice, related to
download_commands.cc and download_prefs.cc. (CVE-2015-1274)
Use-after-free vulnerability in
content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB
implementation in Google Chrome before 44.0.2403.89 allows remote
attackers to cause a denial of service or possibly have unspecified other
impact by leveraging an abort action before a certain write operation.
(CVE-2015-1276)
Use-after-free vulnerability in the accessibility implementation in Google
Chrome before 44.0.2403.89 allows remote attackers to cause a denial of
service or possibly have unspecified other impact by leveraging lack of
certain validity checks for accessibility-tree data structures.
(CVE-2015-1277)
content/browser/web_contents/web_contents_impl.cc in Google Chrome before
44.0.2403.89 does not ensure that a PDF document's modal dialog is closed
upon navigation to an interstitial page, which allows remote attackers to
spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf
document. (CVE-2015-1278)
Integer overflow in the CJBig2_Image::expand function in
fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before
44.0.2403.89, allows remote attackers to cause a denial of service
(heap-based buffer overflow) or possibly have unspecified other impact via
large height and stride values. (CVE-2015-1279)
SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89,
allows remote attackers to cause a denial of service (memory corruption)
or possibly have unspecified other impact by leveraging access to a
renderer process and providing crafted serialized data. (CVE-2015-1280)
core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before
44.0.2403.89, does not properly determine the V8 context of a microtask,
which allows remote attackers to bypass Content Security Policy (CSP)
restrictions by providing an image from an unintended source.
(CVE-2015-1281)
Multiple use-after-free vulnerabilities in
fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome
before 44.0.2403.89, allow remote attackers to cause a denial of service
or possibly have unspecified other impact via a crafted PDF document,
related to the (1) Document::delay and (2) Document::DoFieldDelay
functions. (CVE-2015-1282)
The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in
Blink, as used in Google Chrome before 44.0.2403.89, does not properly
check for a page's maximum number of frames, which allows remote attackers
to cause a denial of service (invalid count value and use-after-free) or
possibly have unspecified other impact via crafted JavaScript code that
makes many createElement calls for IFRAME elements. (CVE-2015-1284)
The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp
in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89,
does not properly choose a truncation point, which makes it easier for
remote attackers to obtain sensitive information via an unspecified
linear-time attack. (CVE-2015-1285)
Cross-site scripting (XSS) vulnerability in the
V8ContextNativeHandler::GetModuleSystem function in
extensions/renderer/v8_context_native_handler.cc in Google Chrome before
44.0.2403.89 allows remote attackers to inject arbitrary web script or
HTML by leveraging the lack of a certain V8 context restriction, aka a
Blink "Universal XSS (UXSS)." (CVE-2015-1286)
Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode
exception that limits the cases in which a Cascading Style Sheets (CSS)
document is required to have the text/css content type, which allows
remote attackers to bypass the Same Origin Policy via a crafted web site,
related to core/fetch/CSSStyleSheetResource.cpp. (CVE-2015-1287)
The Spellcheck API implementation in Google Chrome before 44.0.2403.89
does not use an HTTPS session for downloading a Hunspell dictionary, which
allows man-in-the-middle attackers to deliver incorrect spelling
suggestions or possibly have unspecified other impact via a crafted file,
a related issue to CVE-2015-1263. (CVE-2015-1288)
Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89
allow attackers to cause a denial of service or possibly have other impact
via unknown vectors. (CVE-2015-1289)MGASA-2015-0265mageiachromium-browser-stable+1Updated chromium-browser package fixes security vulnerability
A scheme validation error in WebUI (CVE-2015-1266).
Two cross-origin bypass issues in Blink (CVE-2015-1267, CVE-2015-1268).
A normalization error in the HSTS/HPKP preload list (CVE-2015-1269).
This update also disables the automatic, silent downloading and
installation of "external components" like the hotword extension.MGASA-2015-0235mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 43.0.2357.65 fixes a number of security issues:
Use-after-free vulnerability in the SpeechRecognitionClient implementation
in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote
attackers to execute arbitrary code via a crafted document. (CVE-2015-1251)
common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does
not properly handle wraps, which allows remote attackers to bypass a
sandbox protection mechanism or cause a denial of service (out-of-bounds
write) via vectors that trigger a write operation with a large amount of
data, related to the PartialCircularBuffer::Write and
PartialCircularBuffer::DoWrite functions. (CVE-2015-1252)
core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in
Blink, as used in Google Chrome before 43.0.2357.65, allows remote
attackers to bypass the Same Origin Policy via crafted JavaScript code that
appends a child to a SCRIPT element, related to the insert and
executeReparentTask functions. (CVE-2015-1253)
core/dom/Document.cpp in Blink, as used in Google Chrome before
43.0.2357.65, enables the inheritance of the designMode attribute, which
allows remote attackers to bypass the Same Origin Policy by leveraging the
availability of editing. (CVE-2015-1254)
Use-after-free vulnerability in
content/renderer/media/webaudio_capturer_source.cc in the WebAudio
implementation in Google Chrome before 43.0.2357.65 allows remote attackers
to cause a denial of service (heap memory corruption) or possibly have
unspecified other impact by leveraging improper handling of a stop action
for an audio track. (CVE-2015-1255)
Use-after-free vulnerability in the SVG implementation in Blink, as used in
Google Chrome before 43.0.2357.65, allows remote attackers to cause a
denial of service or possibly have unspecified other impact via a crafted
document that leverages improper handling of a shadow tree for a use
element. (CVE-2015-1256)
platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in
Blink, as used in Google Chrome before 43.0.2357.65, does not properly
handle an insufficient number of values in an feColorMatrix filter, which
allows remote attackers to cause a denial of service (container overflow)
or possibly have unspecified other impact via a crafted document.
(CVE-2015-1257)
Google Chrome before 43.0.2357.65 relies on libvpx code that was not built
with an appropriate --size-limit value, which allows remote attackers to
trigger a negative value for a size field, and consequently cause a denial
of service or possibly have unspecified other impact, via a crafted frame
size in VP9 video data. (CVE-2015-1258)
PDFium, as used in Google Chrome before 43.0.2357.65, does not properly
initialize memory, which allows remote attackers to cause a denial of
service or possibly have unspecified other impact via unknown vectors.
(CVE-2015-1259)
Multiple use-after-free vulnerabilities in
content/renderer/media/user_media_client_impl.cc in the WebRTC
implementation in Google Chrome before 43.0.2357.65 allow remote attackers
to cause a denial of service or possibly have unspecified other impact via
crafted JavaScript code that executes upon completion of a getUserMedia
request. (CVE-2015-1260)
platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google
Chrome before 43.0.2357.65, does not initialize a certain width field,
which allows remote attackers to cause a denial of service or possibly have
unspecified other impact via crafted Unicode text. (CVE-2015-1262)
The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does
not use an HTTPS session for downloading a Hunspell dictionary, which
allows man-in-the-middle attackers to deliver incorrect spelling
suggestions or possibly have unspecified other impact via a crafted file.
(CVE-2015-1263)
Cross-site scripting (XSS) vulnerability in Google Chrome before
43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web
script or HTML via crafted data that is improperly handled by the Bookmarks
feature. (CVE-2015-1264)
Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65
allow attackers to cause a denial of service or possibly have other impact
via unknown vectors. (CVE-2015-1265)
Multiple vulnerabilities in V8 have been fixed at the tip of the 4.3 branch
(currently 4.3.61.21).MGASA-2015-0164mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 42.0.2311.90 fixes several security issues, among others a
cross-origin-bypass in HTML parser (CVE-2015-1235), a cross-origin-bypass
in Blink (CVE-2015-1236), a use-after-free in IPC (CVE-2015-1237), an
out-of-bounds write in Skia (CVE-2015-1238), an out-of-bounds read in WebGL
(CVE-2015-1240), Tap-Jacking (CVE-2015-1241), type confusion in V8
(CVE-2015-1242), HSTS bypass in WebSockets (CVE-2015-1244), a
use-after-free in PDFium (CVE-2015-1245), an out-of-bounds read in Blink
(CVE-2015-1246), scheme issues in OpenSearch, (CVE-2015-1247), and a
SafeBrowsing bypass (CVE-2015-1248). Also included are various fixes from
internal audits, fuzzing and other initiatives (CVE-2015-1249), and
multiple vulnerabilities in V8 have been fixed at the tip of the 4.2 branch
(currently 4.2.77.14) (CVE-2015-3333).MGASA-2015-0141mageiachromium-browser-stableUpdated chromium-browser-stable packages fix security vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities:
Google Chrome before 41.0.2272.118 does not properly handle the interaction of
IPC, the Gamepad API, and Google V8, which allows remote attackers to execute
arbitrary code via unspecified vectors (CVE-2015-1233).
Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google
Chrome before 41.0.2272.118 allows remote attackers to cause a denial of
service (buffer overflow) or possibly have unspecified other impact by
manipulating OpenGL ES commands (CVE-2015-1234).