
CVE-2013-2917 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2917
02 Oct 2013 — The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array. La función ReverbConvolverStage::ReverbConvolverStage en core/platform/audio/ReverbConvolverStage.cpp en la implementación Web Audio en Blink, tal como se utiliza en Google Chrome anterior a la ve... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2013-2908 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2908
02 Oct 2013 — Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code. Google Chrome anterior a la versión 30.0.1599.66 usa llamadas a funciones incorrectas para determinar los valores de objetos NavigationEntry, lo que permite a atacantes remotos falsificar la barra de direcciones a través de vectores que involucren una respuesta con u... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html •

CVE-2013-2922 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2922
02 Oct 2013 — Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element. Vulnerabilidad de uso después de liberación en core/html/HTMLTemplateElement.cpp en Blink, tal como se utiliza en Google Chrome anterior a la versión 30.0.1599.66, permite a atacantes remotos causar una denegación de servicio o po... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2923 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2923
02 Oct 2013 — Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Múltiples vulnerabilidades sin especificar en Google Chrome anterior a la versión 30.0.1599.66 permite a atacantes causar una denegación de servicio o probablemente tener otro impacto a través de vectores desconocidos. Multiple vulnerabilities have been reported in Chromium and V8, worst of which may allow execution of arbitrary code. Versi... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html •

CVE-2013-2913 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2913
02 Oct 2013 — Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document. Vulnerabilidad de uso después de liberación en la función XMLDocumentParser::append en core/xml/parser/XMLDocumentParser.cpp en Blink, tal y como se utiliza en Google Chrome anterior a la versión 30.0.1599.66, ... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2910 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2910
02 Oct 2013 — Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Vulnerabilidad de uso después de liberación en modules/webaudio/AudioScheduledSourceNode.cpp en la implementación Web Audio en Blink, tal como se utiliza en Google Chrome anterior a la versión 30.0.1599.66, permite a atacantes rem... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2909 – Apple Security Advisory 2013-12-16-1
https://notcve.org/view.php?id=CVE-2013-2909
02 Oct 2013 — Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings. Vulnerabilidad de uso después de liberación en Blink, tal como se utiliza en Google Chrome anterior a la versión 30.0.1599.66, permite a atacantes remotos causar una denegación de servicio o posiblemente tener otr... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2921 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2921
02 Oct 2013 — Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry. Vulnerabilidad de doble liberación en la función ResourceFetcher::didLoadResource en core/fetch/ResourceFetcher.cpp del cargador de recursos en B... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2918 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2918
02 Oct 2013 — Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks. Vulnerabilidad de uso despues de liberación en la función RenderBlock::collapseAnonymousBlockChild en core/rendering/RenderBlock.c... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html • CWE-399: Resource Management Errors •

CVE-2013-2915 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-2915
02 Oct 2013 — Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL. Google Chrome anterior a la versión 30.0.1599.66 conserva objetos NavigationEntry pendientes en ciertas circunstancias no válidas, lo que permite a atacantes remotos falsificar la barra de direcciones a través de una URL con un esquema malformado, como se demuestra co... • http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html •