
CVE-2013-0899 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0899
23 Feb 2013 — Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet. Desbordamiento de entero en la aplicación de relleno en la función opus_packet_parse_impl en src / opus_decoder.c en el Opus antes de v1.0.2, tal como se utiliza en Go... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html • CWE-190: Integer Overflow or Wraparound •

CVE-2013-0898 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0898
23 Feb 2013 — Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL. Vulnerabilidad de uso después de la liberación en Google Chrome anterior a v25.0.1364.97 en Windows y Linux, y anterior a v25.0.1364.99 en Mac OS X, permite a atacantes remotos producir una denegación de servicio (caída de la aplicación) o posiblemente tener otro... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html • CWE-416: Use After Free •

CVE-2013-0900 – Gentoo Linux Security Advisory 201402-14
https://notcve.org/view.php?id=CVE-2013-0900
23 Feb 2013 — Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Condición de carrera en la funcionalidad "International Components for Unicode (ICU)" de Google Chrome antes v25.0.1364.97 en Windows y Linux, y antes v25.0.1364.99 en Mac OS X, permite a atacantes remotos provocar una de... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVE-2013-0888 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0888
23 Feb 2013 — Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a "user gesture check for dangerous file downloads." Skia, usado pro Google Chrome anterior a v25.0.1364.97 en Windows y Linux, y anterior a v25.0.1364.99 en Mac OS X, permite a atacantes remotos causar una denegación de servicio (lectura fuera de los límites) mediante vectores no especificados. Multiple... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html • CWE-125: Out-of-bounds Read •

CVE-2013-0892 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0892
23 Feb 2013 — Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors. Múltiples vulnerabilidades sin especificar en la capa IPC de Google Chrome v25.0.1364.97 sobre Windows y Linux, y anterior a v25.0.1364.99 sobre Mac OS X, permite a atacantes remotos provocar una denegación de servicio u otro impacto a través de vectores desc... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html •

CVE-2013-0895 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0895
23 Feb 2013 — Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors. Google Chrome antes de v25.0.1364.97 para Linux, y antes de v25.0.1364.99 para Mac OS X, no maneja correctamente las rutas durante la operaciones de copia, lo que podría hacer que sea más fácil para los atacantes remotos ejecutar programas arbitrarios a través de vecto... • http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVE-2013-0842 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0842
24 Jan 2013 — Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors. Google Chrome anterior a v24.0.1312.56 no maneja correctamente caracteres %00 en nombres de ruta, lo que tiene un impacto no especificado y vectores de ataque. Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code. Versions less than 29.0.1457.57 are affected. • http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html •

CVE-2013-0840 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0840
24 Jan 2013 — Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors. Google Chrome anterior a v24.0.1312.56 no valida URLs durante la apertura de nuevas ventanas, lo que tiene un impacto no especificado y vectores de ataque. Multiple vulnerabilities have been reported in Chromium and V8, some of which may allow execution of arbitrary code. Versions less than 29.0.1457.57 are affected. • http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html •

CVE-2013-0839 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0839
24 Jan 2013 — Use-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of fonts in CANVAS elements. Vulnerabilidad de uso después de la liberación en Google Chrome antes de v24.0.1312.56 que permite a atacantes remotos provocar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores relacionados con el manejador de fuentes en elemetos CANVAS Mu... • http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html • CWE-399: Resource Management Errors •

CVE-2013-0841 – Gentoo Linux Security Advisory 201309-16
https://notcve.org/view.php?id=CVE-2013-0841
24 Jan 2013 — Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Errores índice de array en la funcionalidad de bloqueo de contenido de Google Chrome antes v24.0.1312.56 que permite a atacantes remotos provocar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores desconocidos. Multiple vulnerabilities have been reported in ... • http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html • CWE-20: Improper Input Validation •