FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-22 18:21:47 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
d395e44f-6f4f-11e4-a444-00262d5ed8ee	chromium -- multiple vulnerabilities Google Chrome Releases reports: 42 security fixes in this release, including: [389734] High CVE-2014-7899: Address bar spoofing. Credit to Eli Grey. [406868] High CVE-2014-7900: Use-after-free in pdfium. Credit to Atte Kettunen from OUSPG. [413375] High CVE-2014-7901: Integer overflow in pdfium. Credit to cloudfuzzer. [414504] High CVE-2014-7902: Use-after-free in pdfium. Credit to cloudfuzzer. [414525] High CVE-2014-7903: Buffer overflow in pdfium. Credit to cloudfuzzer. [418161] High CVE-2014-7904: Buffer overflow in Skia. Credit to Atte Kettunen from OUSPG. [421817] High CVE-2014-7905: Flaw allowing navigation to intents that do not have the BROWSABLE category. Credit to WangTao(neobyte) of Baidu X-Team. [423030] High CVE-2014-7906: Use-after-free in pepper plugins. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team. [423703] High CVE-2014-0574: Double-free in Flash. Credit to biloulehibou. [424453] High CVE-2014-7907: Use-after-free in blink. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team. [425980] High CVE-2014-7908: Integer overflow in media. Credit to Christoph Diehl. [391001] Medium CVE-2014-7909: Uninitialized memory read in Skia. Credit to miaubiz. CVE-2014-7910: Various fixes from internal audits, fuzzing and other initiatives. Discovery 2014-11-18 Entry 2014-11-18 chromium < 39.0.2171.65 chromium-pulse < 39.0.2171.65 CVE-2014-0574 CVE-2014-7899 CVE-2014-7900 CVE-2014-7901 CVE-2014-7902 CVE-2014-7903 CVE-2014-7904 CVE-2014-7905 CVE-2014-7906 CVE-2014-7907 CVE-2014-7908 CVE-2014-7909 CVE-2014-7910 http://googlechromereleases.blogspot.nl/2014/11/stable-channel-update_18.html

VuXML ID

Description

d395e44f-6f4f-11e4-a444-00262d5ed8ee

chromium -- multiple vulnerabilities

Google Chrome Releases reports:

42 security fixes in this release, including:

[389734] High CVE-2014-7899: Address bar spoofing. Credit to Eli Grey.

[406868] High CVE-2014-7900: Use-after-free in pdfium. Credit to Atte Kettunen from OUSPG.

[413375] High CVE-2014-7901: Integer overflow in pdfium. Credit to cloudfuzzer.

[414504] High CVE-2014-7902: Use-after-free in pdfium. Credit to cloudfuzzer.

[414525] High CVE-2014-7903: Buffer overflow in pdfium. Credit to cloudfuzzer.

[418161] High CVE-2014-7904: Buffer overflow in Skia. Credit to Atte Kettunen from OUSPG.

[421817] High CVE-2014-7905: Flaw allowing navigation to intents that do not have the BROWSABLE category. Credit to WangTao(neobyte) of Baidu X-Team.

[423030] High CVE-2014-7906: Use-after-free in pepper plugins. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team.

[423703] High CVE-2014-0574: Double-free in Flash. Credit to biloulehibou.

[424453] High CVE-2014-7907: Use-after-free in blink. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team.

[425980] High CVE-2014-7908: Integer overflow in media. Credit to Christoph Diehl.

[391001] Medium CVE-2014-7909: Uninitialized memory read in Skia. Credit to miaubiz.

CVE-2014-7910: Various fixes from internal audits, fuzzing and other initiatives.

Discovery 2014-11-18
Entry 2014-11-18
chromium

< 39.0.2171.65

chromium-pulse

< 39.0.2171.65

CVE-2014-0574
CVE-2014-7899
CVE-2014-7900
CVE-2014-7901
CVE-2014-7902
CVE-2014-7903
CVE-2014-7904
CVE-2014-7905
CVE-2014-7906
CVE-2014-7907
CVE-2014-7908
CVE-2014-7909
CVE-2014-7910
http://googlechromereleases.blogspot.nl/2014/11/stable-channel-update_18.html