Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the     WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified     other impact via unknown vectors. (CVE-2011-1799)

Note that Nessus relies on the presence of the package as reported by the vendor.

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-1292     Use-after-free vulnerability in the frame-loader     implementation in Google Chrome allows remote attackers     to cause a denial of service or possibly have     unspecified other impact via unknown vectors.

  - CVE-2011-1293     Use-after-free vulnerability in the HTMLCollection     implementation in Google Chrome allows remote attackers     to cause a denial of service or possibly have     unspecified other impact via unknown vectors.

  - CVE-2011-1440     Use-after-free vulnerability in Google Chrome allows     remote attackers to cause a denial of service or     possibly have unspecified other impact via vectors     related to the Ruby element and Cascading Style Sheets     (CSS) token sequences.

  - CVE-2011-1444     Race condition in the sandbox launcher implementation in     Google Chrome on Linux allows remote attackers to cause     a denial of service or possibly have unspecified other     impact via unknown vectors.

  - CVE-2011-1797     Google Chrome does not properly render tables, which     allows remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors that lead to a 'stale pointer'.

  - CVE-2011-1799     Google Chrome does not properly perform casts of     variables during interaction with the WebKit engine,     which allows remote attackers to cause a denial of     service or possibly have unspecified other impact via     unknown vectors.

Versions of Google Chrome earlier than 11.0.696.68 are potentially affected by multiple vulnerabilities :

  - Bad casts exist in Chromium WebKit glue. (CVE-2011-1799)

  - Integer overflows exist in the SVG filters. (CVE-2011-1800)

The version of Google Chrome installed on the remote host is earlier than 11.0.696.68.  Such versions of Chrome are affected by multiple vulnerabilities:

  - Multiple variable cast errors exist in the WebKit glue     code. These errors can be exploited and allow an     attacker to execute arbitrary code or crash the     the application. (Issue #64046)

  - Multiple integer overflows exist in the SVG filters.
    These errors can be exploited and allow an attacker to     execute arbitrary code or crash the application.
    (Issue #80608)

ID	Name	Product	Family	Type	Severity
264277	Linux Distros Unpatched Vulnerability : CVE-2011-1799	Nessus	Misc.	Local	critical
55033	Debian DSA-2245-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	Local	high
5912	Google Chrome < 11.0.696.68 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
53879	Google Chrome < 11.0.696.68 Multiple Vulnerabilities	Nessus	Windows	Local	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2011-1799

critical

Tenable Plugins

critical

high

high

high

critical