Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT Security Bulletin
ASB-2013.0129
A vulnerability has been identified in Google Chrome
18 November 2013
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Google Chrome
Operating System: Windows
OS X
Linux variants
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2013-6632
Member content until: Wednesday, December 18 2013
OVERVIEW
A vulnerability has been identified in Google Chrome prior to version
31.0.1650.57. [1]
IMPACT
The vendor has provided the following details:
" Congratulations to Pinkie Pie, for reclaiming his title with
another impressive exploit!
[Ka-po-po-po-pow!!! $50,000*] [319117] [319125] Critical
CVE-2013-6632: Multiple memory corruption issues. Credit to Pinkie
Pie.
* This reward was co-sponsored by the HP Zero Day Initiative as part
of Mobile Pwn2Own 2013." [1]
MITIGATION
The vendor recommends updating to the latest version of Google Chrome
to correct this issue. [1]
REFERENCES
[1] Thursday, November 14, 2013 Stable Channel Update
http://googlechromereleases.blogspot.dk/2013/11/stable-channel-update_14.html
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=lj2s
-----END PGP SIGNATURE-----