Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT Security Bulletin
ASB-2017.0182
Multiple vulnerabilities have been identified in Google Chrome
19 October 2017
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Google Chrome
Operating System: UNIX variants (UNIX, Linux, OSX)
Windows
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Provide Misleading Information -- Remote with User Interaction
Access Confidential Data -- Remote with User Interaction
Reduced Security -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2017-15395 CVE-2017-15394 CVE-2017-15393
CVE-2017-15392 CVE-2017-15391 CVE-2017-15390
CVE-2017-15389 CVE-2017-15388 CVE-2017-15387
CVE-2017-15386 CVE-2017-5133 CVE-2017-5132
CVE-2017-5131 CVE-2017-5130 CVE-2017-5129
CVE-2017-5128 CVE-2017-5127 CVE-2017-5126
CVE-2017-5125 CVE-2017-5124
Member content until: Saturday, November 18 2017
OVERVIEW
Multiple vulnerabilities have been identified in Google Chrome prior
to version 62.0.3202.62. [1]
IMPACT
Google have provided the following details regarding the
vulnerabilities:
"This update includes 35 security fixes. Below, we highlight fixes that
were contributed by external researchers. Please see the Chrome Security
Page for more information.
[$7500+$1337][762930] High CVE-2017-5124: UXSS with MHTML. Reported by
Anonymous on 2017-09-07
[$5000][749147] High CVE-2017-5125: Heap overflow in Skia. Reported by
Anonymous on 2017-07-26
[$3000][760455] High CVE-2017-5126: Use after free in PDFium. Reported by
Luat Nguyen (@l4wio) of KeenLab, Tencent on 2017-08-30
[$3000][765384] High CVE-2017-5127: Use after free in PDFium. Reported by
Luat Nguyen (@l4wio) of KeenLab, Tencent on 2017-09-14
[$3000][765469] High CVE-2017-5128: Heap overflow in WebGL. Reported by
Omair on 2017-09-14
[$3000][765495] High CVE-2017-5129: Use after free in WebAudio. Reported
by Omair on 2017-09-15
[$3000][718858] High CVE-2017-5132: Incorrect stack manipulation in
WebAssembly. Reported by Gaurav Dewan (@007gauravdewan) of Adobe Systems
India Pvt. Ltd. on 2017-05-05
[$N/A][722079] High CVE-2017-5130: Heap overflow in libxml2. Reported by
Pranjal Jumde (@pjumde) on 2017-05-14
[$5000][744109] Medium CVE-2017-5131: Out of bounds write in Skia. Reported
by Anonymous on 2017-07-16
[$2000][762106] Medium CVE-2017-5133: Out of bounds write in Skia. Reported
by Aleksandar Nikolic of Cisco Talos on 2017-09-05
[$1000][752003] Medium CVE-2017-15386: UI spoofing in Blink. Reported by
WenXu Wu of Tencent's Xuanwu Lab on 2017-08-03
[$1000][756040] Medium CVE-2017-15387: Content security bypass. Reported
by Jun Kokatsu (@shhnjk) on 2017-08-16
[$1000][756563] Medium CVE-2017-15388: Out of bounds read in Skia. Reported
by Kushal Arvind Shah of Fortinet's FortiGuard Labs on 2017-08-17
[$500][739621] Medium CVE-2017-15389: URL spoofing in OmniBox. Reported
by xisigr of Tencent's Xuanwu Lab on 2017-07-06
[$500][750239] Medium CVE-2017-15390: URL spoofing in OmniBox. Reported
by Haosheng Wang (@gnehsoah) on 2017-07-28
[$500][598265] Low CVE-2017-15391: Extension limitation bypass in
Extensions. Reported by Joao Lucas Melo Brasio (whitehathackers.com.br)
on 2016-03-28
[$N/A][714401] Low CVE-2017-15392: Incorrect registry key handling in
PlatformIntegration. Reported by Xiaoyin Liu (@general_nfs) on 2017-04-22
[$N/A][732751] Low CVE-2017-15393: Referrer leak in Devtools. Reported by
Svyat Mitin on 2017-06-13
[$N/A][745580] Low CVE-2017-15394: URL spoofing in extensions UI. Reported
by Sam @sudosammy on 2017-07-18
[$N/A][759457] Low CVE-2017-15395: Null pointer dereference in
ImageCapture. Reported by Johannes Bergman (johberlvi@) on 2017-08-28
We would also like to thank all security researchers that worked with us
during the development cycle to prevent security bugs from ever reaching the
stable channel.As usual, our ongoing internal security work was responsible
for a wide range of fixes:
[775550] Various fixes from internal audits, fuzzing and other initiatives"
[1]
MITIGATION
The latest version of Google Chrome can be downloaded from the
vendor's website. [2]
REFERENCES
[1] Chrome Releases: Stable Channel Update for Desktop
https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
[2] Google Chrome
http://www.google.com/chrome
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=Sx2D
-----END PGP SIGNATURE-----