Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.

The Chromium update to version 17.0.945 and v8 update to version 3.7.8.0 resolve serveral bugs as well as a security bug in v8 that could potentially be exploited to execute arbitrary code (CVE-2011-3900).

The version of Google Chrome installed on the remote host is earlier than 15.0.874.121 and is affected by an out-of-bounds memory write in the V8 JavaScript engine.  Such an error can cause data corruption, application crashes or can potentially allow code execution.

The remote host is affected by the vulnerability described in GLSA-201111-05 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. The attacker also could cause       a Java applet to run without user confirmation.
  Workaround :

    There is no known workaround at this time.

Versions of Google Chrome earlier than 15.0.874.121 are affected by a code execution vulnerability due to an out-of-bounds write in v8.  A remote, unauthenticated attacker, exploiting this flaw, could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

ID	Name	Product	Family	Severity
74526	openSUSE Security Update : v8 / chromium (openSUSE-2011-53)	Nessus	SuSE Local Security Checks	high
56920	Google Chrome < 15.0.874.121 V8 Out-of-bounds Write Unspecified Remote Memory Corruption	Nessus	Windows	high
56901	GLSA-201111-05 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
6095	Google Chrome < 15.0.874.121 Code Execution	Nessus Network Monitor	Web Clients	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-3900

critical

Tenable Plugins

high

high

high

high

critical