Alert GCSA-15003 - Vulnerabilita' in Google Chrome

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

   Alert ID : GCSA-15003
       Data : 23 Gennaio 2015
     Titolo : Vulnerabilita' in Google Chrome

******************************************************************

:: Descrizione del problema

Google ha rilasciato una nuova versione del browser Chrome che risolve numerose vulnerabilita' presenti del software.
Per una descrizione completa delle vulnerabilita' si rimanda alla sezione 'Riferimenti'.


:: Software interessato

Google Chrome versioni precedenti alla 40.0.2214.91
per Windows, Mac e Linux


:: Impatto

Denial of Service
Esecuzione di codice arbitrario


:: Soluzioni

Aggiornare Google Chrome all'ultima versione

L'aggiornamento sara' automatico per tutte le installazioni
in cui non sia stato disattivata l'opzione 'aggiornamento automatico'.

Per l'installazione manuale scaricare il software dal sito ufficiale:

http://www.google.com/chrome/?hl=it


:: Riferimenti

Google Chrome Advisory
http://googlechromereleases.blogspot.it/2015/01/stable-update.html

Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7923
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7924
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7925
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7926
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7927
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7928
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7930
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7931
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7929
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7932
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7933
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7934
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7935
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7936
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7937
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7938
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7939
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7940
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7941
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7942
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7943
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7944
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7945
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7946
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7947
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1205


GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iD8DBQFUwkKswZxMk2USYEIRArrQAJ4174cAaV7yn2nbwjSwe8deYYqFJQCeKifJ
HYj7gnsjcaq5RDpiEfpOLK8=
=pe8s
-----END PGP SIGNATURE-----