Security Fixes and RewardsThis update includes
19 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the
Chromium security page for more information.
[$1000][
344492]
High CVE-2013-6663: Use-after-free in svg images. Credit to Atte Kettunen of
OUSPG.[$500][
326854]
High CVE-2013-6664: Use-after-free in speech recognition. Credit to Khalil Zhani
.[$2000][
337882]
High CVE-2013-6665: Heap buffer overflow in software rendering. Credit to cloudfuzzer.
[
332023]
Medium CVE-2013-6666: Chrome allows requests in flash header request. Credit to netfuzzerr.
As usual, our ongoing internal security work responsible for a wide range of fixes:
[
348175] CVE-2013-6667: Various fixes from internal audits, fuzzing and other initiatives.
[
343964,
344186,
347909] CVE-2013-6668: Multiple vulnerabilities in V8 fixed in version 3.24.35.10.
Many of the above bugs were detected using
AddressSanitizer.
This release fixes a number of crashes and other bugs. A full list of changes is available in the
SVN log. If you find a new issue, please let us know by
filing a bug.
Anthony Laforge
Google Chrome
