http://code.google.com/p/chromium/issues/detail?id=10736

http://code.google.com/p/skia/source/detail?r=159

http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html

54248

35014

34859

1022175

ADV-2009-1266

The version of Google Chrome installed on the remote host is earlier than 1.0.154.64. Such versions are reportedly affected by multiple vulnerabilities :

  - A failure to properly validate input from a renderer     (tab) process could allow an attacker to crash the     browser and possibly run arbitrary code with the     privileges of the logged on user. (CVE-2009-1441)

  - A failure to check the result of integer multiplication     when computing image sizes could allow a specially     crafted image or canvas to cause a tab to crash and     possibly allow an attacker to execute arbitrary code     inside the (sandboxed) renderer process. (CVE-2009-1442)

The version of Google Chrome installed on the remote host is earlier than 1.0.154.64. Such versions are reportedly affected by multiple vulnerabilities : 

  - A failure to properly validate input from a renderer (tab) process could allow an attacker to crash the browser and possibly run arbitrary code with the privileges of the logged on user. (CVE-2009-1441)

  - A failure to check the result of integer multiplication when computing image sizes could allow a specially-crafted image or canvas to cause a tab to crash and possibly allow an attacker to execute arbitrary code inside the (sandboxed) renderer process. (CVE-2009-1442)

ID	Name	Product	Family	Severity
38699	Google Chrome < 1.0.154.64 Multiple Overflows	Nessus	Windows	high
800920	Google Chrome < 1.0.154.64 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

CVE-2009-1442

medium

Tenable Plugins

high

high