Alert GCSA-13035 - Vulnerabilita' in Google Chrome

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

Alert ID : GCSA-13035
Data : 5 Giugno 2013
Titolo : Vulnerabilita' in Google Chrome

******************************************************************

:: Descrizione del problema

Sono state riscontrate diverse vulnerabilita' in Google Chrome che
potrebbero essere sfruttate per compromettere un sistema che ne sia
affetto, oppure divulgare informazioni sensibili.


:: Software interessato

Google Chrome versioni precedenti alla 27.0.1453.110.


:: Impatto

Esecuzione di codice arbitrario
Compromissione del sistema
Divulgazione di dati sensibili


:: Soluzioni

Aggiornare Chrome alla versione 27.0.1453.110.

Per l'installazione manuale scaricare il software dal sito ufficiale:
http://www.google.com/chrome/?hl=it


:: Riferimenti

Google Chrome and Original Advisory
http://googlechromereleases.blogspot.dk/2013/06/stable-channel-update.html

Secunia
http://secunia.com/advisories/53681/

Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2854
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2855
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2856
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2859
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2860
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2861
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2865


GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAlGwStkACgkQwZxMk2USYELkNgCgi/JUC/tm5ZshZEmFZNZeHJmZ
9wsAoIUtmyTzmm5awr3mB1YaRi0X7FpC
=RWAV
-----END PGP SIGNATURE-----