Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT Security Bulletin
ASB-2015.0040
A number of vulnerabilities have been identified in Google Chrome
29 April 2015
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Google Chrome
Operating System: Windows
OS X
Linux variants
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2015-1243
Member content until: Friday, May 29 2015
OVERVIEW
A number of vulnerabilities have been identified in Google Chrome
prior to version 42.0.2311.135 for Windows, Mac and Linux. [1]
IMPACT
The vendor has provided the following details regarding the vulnerabilities:
"This update includes 5 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chromium security page for more information.
$TBD][453279] High CVE-2015-1243: Use-after-free in DOM. Credit to
Saif El-Sherei". [1]
MITIGATION
Affected users are advised to upgrade to the latest version. [1]
REFERENCES
[1] Stable Channel Update
http://googlechromereleases.blogspot.com.au/2015/04/stable-channel-update_28.html
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=fieO
-----END PGP SIGNATURE-----