CVE-2015-0093
published 2015-03-11CVE-2015-0093: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
PriorityP262critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
20.83%
97.2th percentile
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0092.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2012 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ppjh-6557-7v9w: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2015-0088 [CRITICAL] CWE-94 GHSA-ppjh-6557-7v9w: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0090, CVE-2015-0091, CVE-2015-0092, and CVE-2015-0093.
GHSA
GHSA-27p5-g7pw-c8rc: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2015-0092 [CRITICAL] CWE-94 GHSA-27p5-g7pw-c8rc: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0093.
GHSA
GHSA-fvhq-wrc7-3phf: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2015-0091 [CRITICAL] CWE-94 GHSA-fvhq-wrc7-3phf: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0092, and CVE-2015-0093.
GHSA
GHSA-pj4g-4796-v4xv: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2015-0090 [CRITICAL] CWE-94 GHSA-pj4g-4796-v4xv: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0091, CVE-2015-0092, and CVE-2015-0093.
GHSA
GHSA-7p87-g4q8-442j: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2015-0093 [CRITICAL] CWE-94 GHSA-7p87-g4q8-442j: Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0092.
Project0
Déjà vu-lnerability - Project Zero
project_zero·2021-02-01
CVE-2014-9665 Déjà vu-lnerability - Project Zero
A Year in Review of 0-days Exploited In-The-Wild in 2020
Posted by Maddie Stone, Project Zero
2020 was a year full of 0-day exploits. Many of the Internet’s most popular browsers had their moment in the spotlight. Memory corruption is still the name of the game and how the vast majority of detected 0-days are getting in. While we tried new methods of 0-day detection with modest success, 2020 showed us that there is still a long way to go in detecting these 0-day exploits in-the-wild. But what may be the most notable fact is that 25% of the 0-days detected in 2020 are closely related to previously publicly disclosed vulnerabilities. In other words, 1 out of every 4 detected 0-day exploits could potentially have been avoided if a more thorough investigation and patching effort were explor
Project0
Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure - Project Zero
project_zero·2015-09-01·CVSS 5.0
CVE-2015-0089 [MEDIUM] Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure - Project Zero
Posted by Mateusz Jurczyk of Google Project Zero
In the previous series of posts (parts #1 #2 #3 #4), we discussed the exploitation process of a serious “blend” vulnerability (CVE-2015-0093 / CVE-2015-3052), which was special in that it provided the attacker with an extremely powerful primitive (arbitrary out-of-bounds stack operations) allowing a fully reliable arbitrary remote code execution, and affected both a client-side application – Adobe Reader – and the Microsoft Windows kernel. While that bug was definitely the most severe and technically challenging issue discovered during my Type 1 / OpenType Charstring research conducted several months ago, it was not the only one affecting multiple platforms and certainly not the only interesting one.
In today’s post, I would like to expl
Project0
One font vulnerability to rule them all #1: Introducing the BLEND vulnerability - Project Zero
project_zero·2015-07-01·CVSS 4.3
CVE-2015-0074 [MEDIUM] One font vulnerability to rule them all #1: Introducing the BLEND vulnerability - Project Zero
Posted by Mateusz Jurczyk of Google Project Zero
Last month, I presented parts of my PostScript font security research at the REcon security conference in Montreal, in a talk titled “One font vulnerability to rule them all: A story of cross-software ownage, shared codebases and advanced exploitation”. This talk discussed the exploitation process of a vulnerability found in the implementation of a BLEND Charstring instruction, discovered in a user-mode Adobe Reader’s CoolType library and a kernel-mode Adobe Type Manager Font Driver (ATMFD.DLL) used by Windows, both of which are responsible for supporting Type 1 and OpenType fonts in the Reader and system GDI environments. This research was performed as part of my Project Zero work, and more generally resulted in a multitude of vulnerabili
Project0
Project Zero RCA: CVE-2020-27930: Safari RCE in Type 1 fonts handled by libType1Scaler.dylib
project_zero·CVSS 7.8
CVE-2020-27930 [HIGH] Project Zero RCA: CVE-2020-27930: Safari RCE in Type 1 fonts handled by libType1Scaler.dylib
# CVE-2020-27930: Safari RCE in Type 1 fonts handled by libType1Scaler.dylib
*Mateusz Jurczyk and Sergei Glazunov, Project Zero (Originally posted on [Project Zero blog](https://googleprojectzero.blogspot.com/p/rca.html) 2021-02-04)*
## The Basics
**Disclosure or Patch Date:** 5 November 2020
**Product:** Apple Safari
**Advisory:** https://support.apple.com/en-us/HT211929
**Affected Versions:** iOS 14.1 and previous, macOS 10.15.6 and previous
**First Patched Version:** iOS 14.2 and macOS 10.15.7
**Issue/Bug Report:** https://bugs.chromium.org/p/project-zero/issues/detail?id=2105
**Patch CL:** N/A
**Bug-Introducing CL:** N/A
**Reporter(s):** Mateusz Jurczyk & Sergei Glazunov of Google Project Zero
## The Code
**Proof-of-concept:** https://bugs.chromium.org/p/project-zero/issues
No detection rules found.
No public exploits indexed.
Talos
Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK
Patched
blogs_talos·2015-03-10·CVSS 9.3
[CRITICAL] Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK
Patched
## Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK
Patched
Today, Microsoft has released their monthly set of security bulletins designed to address security vulnerabilities within their products. This month’s release sees a total of 14 bulletins being released which address 45 CVEs. The first 5 bulletins are rated critical and address vulnerabilities within Internet Explorer, Office, Windows, and VBScript. The remaining 9 bulletins are rated important and cover vulnerabilities within Windows Kernel Mode Drivers, Exchange, Task Scheduler, Remote Desktop, SChannel, and the Microsoft Graphics component.
## Bulletins Rated Critical MS15-018, MS15-019, MS15-020, MS15-021, and MS15-022 are rated Critical.
MS15-018 addresses multiple vulnerabilities within Internet Explor
Talos
Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK
Patched
blogs_talos·2015-03-10·CVSS 9.3
[CRITICAL] Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK
Patched
Today, Microsoft has released their monthly set of security bulletins designed to address security vulnerabilities within their products. This month’s release sees a total of 14 bulletins being released which address 45 CVEs. The first 5 bulletins are rated critical and address vulnerabilities within Internet Explorer, Office, Windows, and VBScript. The remaining 9 bulletins are rated important and cover vulnerabilities within Windows Kernel Mode Drivers, Exchange, Task Scheduler, Remote Desktop, SChannel, and the Microsoft Graphics component.
### Bulletins Rated CriticalMS15-018, MS15-019, MS15-020, MS15-021, and MS15-022 are rated Critical.
MS15-018 addresses multiple vulnerabilities within Internet Explorer, versions 6 through 11. 12 CVEs were resolved this month, including CVE-2015-0
Zscaler
Zscaler found Multiple Security Vulnerabilities | 03-10-2015
blogs_zscaler·CVSS 9.3
[CRITICAL] Zscaler found Multiple Security Vulnerabilities | 03-10-2015
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
Bugzilla
CVE-2014-7935 chromium-browser: use-after-free in Speech
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7935 [HIGH] CVE-2014-7935 chromium-browser: use-after-free in Speech
CVE-2014-7935 chromium-browser: use-after-free in Speech
An unspecified use-after-free flaw was found in the Speech component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7943 chromium-browser: out-of-bounds read in Skia
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7943 [MEDIUM] CVE-2014-7943 chromium-browser: out-of-bounds read in Skia
CVE-2014-7943 chromium-browser: out-of-bounds read in Skia
An unspecified out-of-bounds read flaw was found in the Skia component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7930 chromium-browser: use-after-free in DOM
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7930 [HIGH] CVE-2014-7930 chromium-browser: use-after-free in DOM
CVE-2014-7930 chromium-browser: use-after-free in DOM
An unspecified use-after-free flaw was found in the DOM component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7947 chromium-browser: out-of-bounds read in PDFium
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7947 [MEDIUM] CVE-2014-7947 chromium-browser: out-of-bounds read in PDFium
CVE-2014-7947 chromium-browser: out-of-bounds read in PDFium
An unspecified out-of-bounds read flaw was found in the PDFium component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7924 chromium-browser: use-after-free in IndexedDB
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7924 [MEDIUM] CVE-2014-7924 chromium-browser: use-after-free in IndexedDB
CVE-2014-7924 chromium-browser: use-after-free in IndexedDB
An unspecified use-after-free flaw was found in the IndexedDB component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
---
Upstream commit:
https://chromium.googlesource.com/chromium/src/+/2d74497dfa5e6fd6ddddc93248c322a57dd8dd2c
Bugzilla
CVE-2014-7942 chromium-browser: uninitialized-value in Fonts
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7942 [HIGH] CVE-2014-7942 chromium-browser: uninitialized-value in Fonts
CVE-2014-7942 chromium-browser: uninitialized-value in Fonts
An unspecified uninitialized-value flaw was found in the Fonts component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7936 chromium-browser: use-after-free in Views
bugzilla·2015-01-23·CVSS 6.8
CVE-2014-7936 [MEDIUM] CVE-2014-7936 chromium-browser: use-after-free in Views
CVE-2014-7936 chromium-browser: use-after-free in Views
An unspecified use-after-free flaw was found in the Views component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7927 chromium-browser: memory corruption in V8
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7927 [HIGH] CVE-2014-7927 chromium-browser: memory corruption in V8
CVE-2014-7927 chromium-browser: memory corruption in V8
An unspecified memory corruption flaw was found in the V8 component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7941 chromium-browser: out-of-bounds read in UI
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7941 [MEDIUM] CVE-2014-7941 chromium-browser: out-of-bounds read in UI
CVE-2014-7941 chromium-browser: out-of-bounds read in UI
An unspecified out-of-bounds read flaw was found in the UI component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7929 chromium-browser: use-after-free in DOM
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7929 [HIGH] CVE-2014-7929 chromium-browser: use-after-free in DOM
CVE-2014-7929 chromium-browser: use-after-free in DOM
An unspecified use-after-free flaw was found in the DOM component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2015-1346 chromium-browser: unspecified vulnerability in Google V8
bugzilla·2015-01-23·CVSS 7.5
CVE-2015-1346 [HIGH] CVE-2015-1346 chromium-browser: unspecified vulnerability in Google V8
CVE-2015-1346 chromium-browser: unspecified vulnerability in Google V8
Common Vulnerabilities and Exposures assigned an identifier CVE-2015-1346 to the following vulnerability:
Name: CVE-2015-1346
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1346
Assigned: 20150122
Reference: http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15,
as used in Google Chrome before 40.0.2214.91, allow attackers to cause
a denial of service or possibly have other impact via unknown vectors.
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7925 chromium-browser: use-after-free in WebAudio
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7925 [HIGH] CVE-2014-7925 chromium-browser: use-after-free in WebAudio
CVE-2014-7925 chromium-browser: use-after-free in WebAudio
An unspecified use-after-free flaw was found in the WebAudio component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7931 chromium-browser: memory corruption in V8
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7931 [HIGH] CVE-2014-7931 chromium-browser: memory corruption in V8
CVE-2014-7931 chromium-browser: memory corruption in V8
An unspecified memory corruption flaw was found in the V8 component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7939 chromium-browser: same-origin-bypass in V8
bugzilla·2015-01-23·CVSS 4.3
CVE-2014-7939 [MEDIUM] CVE-2014-7939 chromium-browser: same-origin-bypass in V8
CVE-2014-7939 chromium-browser: same-origin-bypass in V8
An unspecified same-origin-bypass flaw was found in the V8 component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7938 chromium-browser: memory corruption in Fonts
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7938 [HIGH] CVE-2014-7938 chromium-browser: memory corruption in Fonts
CVE-2014-7938 chromium-browser: memory corruption in Fonts
An unspecified memory corruption flaw was found in the Fonts component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7932 chromium-browser: use-after-free in DOM
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7932 [HIGH] CVE-2014-7932 chromium-browser: use-after-free in DOM
CVE-2014-7932 chromium-browser: use-after-free in DOM
An unspecified use-after-free flaw was found in the DOM component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7944 chromium-browser: out-of-bounds read in PDFium
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7944 [MEDIUM] CVE-2014-7944 chromium-browser: out-of-bounds read in PDFium
CVE-2014-7944 chromium-browser: out-of-bounds read in PDFium
An unspecified out-of-bounds read flaw was found in the PDFium component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7937 chromium-browser: use-after-free in FFmpeg
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7937 [HIGH] CVE-2014-7937 chromium-browser: use-after-free in FFmpeg
CVE-2014-7937 chromium-browser: use-after-free in FFmpeg
An unspecified use-after-free flaw was found in the FFmpeg component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7928 chromium-browser: memory corruption in V8
bugzilla·2015-01-23·CVSS 7.5
CVE-2014-7928 [HIGH] CVE-2014-7928 chromium-browser: memory corruption in V8
CVE-2014-7928 chromium-browser: memory corruption in V8
An unspecified memory corruption flaw was found in the V8 component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7946 chromium-browser: out-of-bounds read in Fonts
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7946 [MEDIUM] CVE-2014-7946 chromium-browser: out-of-bounds read in Fonts
CVE-2014-7946 chromium-browser: out-of-bounds read in Fonts
An unspecified out-of-bounds read flaw was found in the Fonts component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
Bugzilla
CVE-2014-7945 chromium-browser: out-of-bounds read in PDFium
bugzilla·2015-01-23·CVSS 5.0
CVE-2014-7945 [MEDIUM] CVE-2014-7945 chromium-browser: out-of-bounds read in PDFium
CVE-2014-7945 chromium-browser: out-of-bounds read in PDFium
An unspecified out-of-bounds read flaw was found in the PDFium component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0093 https://rhn.redhat.com/errata/RHSA-2015-0093.html
http://www.securityfocus.com/bid/72907http://www.securitytracker.com/id/1031889https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-021http://www.securityfocus.com/bid/72907http://www.securitytracker.com/id/1031889https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-021
2015-03-11
Published