Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers     to execute arbitrary code via unknown vectors. (CVE-2011-1302)

Note that Nessus relies on the presence of the package as reported by the vendor.

Versions of Google Chrome earlier than 10.0.648.205 are potentially affected by multiple vulnerabilities :

  - Chrome uses a version of Adobe Flash player that is affected by an unspecified security vulnerability. (CVE-2011-0611)

 - An off-by-three error exists in the GPU process. (70070)

.  - A use-after-free issue exists in the GPU process. (75629)

  - A heap overflow issue exists in the GPU process. (78524)

The version of Google Chrome installed on the remote host is earlier than 10.0.648.205.  Such versions are affected by multiple vulnerabilities :

  - An off-by-three issue exists in the GPU process.
    (CVE-2011-1300)

  - A use-after-free issue exists in the GPU process.
    (CVE-2011-1301)

  - A heap overflow issue exists in the GPU process.
    (CVE-2011-1302)

ID	Name	Product	Family	Severity
264078	Linux Distros Unpatched Vulnerability : CVE-2011-1302	Nessus	Misc.	critical
800896	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
53392	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	Nessus	Windows	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-1302

critical

Tenable Plugins

critical

high

high

critical