Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a     denial of service or possibly have unspecified other impact via vectors involving counter nodes.
    (CVE-2011-2824)

Note that Nessus relies on the presence of the package as reported by the vendor.

Versions of Google Chrome earlier than 13.0.782.215 are potentially affected by multiple vulnerabilities :

  - An unspecified error related to command line URL parsing. (Issue #72892)
  - Use-after-free errors related to line box handling, counter nodes, custom fonts, and text searching. (Issue #82552, #88216, #88670, #90668)
  - A double-free error related to libxml XPath handling. (Issue #89402)
  - An error related to empty origins exists that can allow cross-domain violation. (Issue #87453)
  - A memory corruption error exists related to vertex handling. (Issue #89836)
  - An out-of-bounds write error exists in the v8 JavaScript engine. (Issue #91517)
  - An integer overrun error exists in the handling of uniform arrays. (Issue #91598)
  - An unspecified issue exists in memset() in PDF.

The version of Google Chrome installed on the remote host is earlier than 13.0.782.215 and is potentially affected by several vulnerabilities:

  - An unspecified error related to command line URL     parsing exists. (Issue #72492)

  - Use-after-free errors related to line box handling,     counter nodes, custom fonts, and text searching.
    (Issue #82552, #88216, #88670, #90668)

  - A double-free error related to libxml XPath handling     exists. (Issue #89402)

  - An error related to empty origins exists that can allow     cross-domain violation. (Issue #87453)

  - A memory corruption error exists related to vertex     handling. (Issue #89836)

  - An out-of-bounds write error exists in the v8     JavaScript engine. (Issue #91517)

  - An integer overrun error exists in the handling of     uniform arrays. (Issue #91598)

ID	Name	Product	Family	Severity
263835	Linux Distros Unpatched Vulnerability : CVE-2011-2824	Nessus	Misc.	critical
800914	Google Chrome < 13.0.782.215 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
55959	Google Chrome < 13.0.782.215 Multiple Vulnerabilities	Nessus	Windows	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-2824

critical

Tenable Plugins

critical

high

high

critical