aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorrene <rene@FreeBSD.org>2012-08-10 16:08:27 +0800
committerrene <rene@FreeBSD.org>2012-08-10 16:08:27 +0800
commitde2e677bf2ceaede579bd0a541b5f1ac7dd6fc5f (patch)
tree05de68170cfff4c7aff0968ecd232874e94f6742 /security
parent0e6dc68f864098539a95392f18fa3cffaebee2e3 (diff)
downloadfreebsd-ports-gnome-de2e677bf2ceaede579bd0a541b5f1ac7dd6fc5f.tar.gz
freebsd-ports-gnome-de2e677bf2ceaede579bd0a541b5f1ac7dd6fc5f.tar.zst
freebsd-ports-gnome-de2e677bf2ceaede579bd0a541b5f1ac7dd6fc5f.zip
Document two vulnerabilities in www/chromium < 21.0.1180.75 related to the
builtin PDF viewer. Obtained from: http://googlechromereleases.blogspot.com/search/label/Stable%20updates
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml32
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 767df7e8dabb..d683d4fa4963 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -52,6 +52,38 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="60bbe12c-e2c1-11e1-a8ca-00262d5ed8ee">
+ <topic>chromium -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>chromium</name>
+ <range><lt>21.0.1180.75</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Google Chrome Releases reports:</p>
+ <blockquote cite="http://googlechromereleases.blogspot.nl/search/label/Stable%20updates">
+ <p>[136643] [137721] [137957] High CVE-2012-2862: Use-after-free in
+ PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with
+ contributions by Gynvael Coldwind of Google Security Team.</p>
+ <p>[136968] [137361] High CVE-2012-2863: Out-of-bounds writes in PDF
+ viewer. Credit to Mateusz Jurczyk of Google Security Team, with
+ contributions by Gynvael Coldwind of Google Security Team.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2012-2862</cvename>
+ <cvename>CVE-2012-2863</cvename>
+ <url>http://googlechromereleases.blogspot.com/search/label/Stable%20updates</url>
+ </references>
+ <dates>
+ <discovery>2012-08-08</discovery>
+ <entry>2012-08-10</entry>
+ </dates>
+ </vuln>
+
<vuln vid="31db9a18-e289-11e1-a57d-080027a27dbf">
<topic>rubygem-rails -- multiple vulnerabilities</topic>
<affects>