Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

The remote host is affected by the vulnerability described in GLSA-201201-03 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition.
    The attacker could also perform URL bar spoofing.
  Workaround :

    There is no known workaround at this time.

Versions of Google Chrome earlier than 16.0.912.63 are potentially affected by multiple vulnerabilities :

  - Out-of-bounds read errors exist related to regex matching, libxml, the PDF parser, the SVG parser, YUV video frame handling, il8n handling in V8 and PDF cross references. (CVE-2011-3903, CVE-2011-3905, CVE-2011-3906, CVE-2011-3908, CVE-2011-3910, CVE-2011-3911, CVE-2011-3914, CVE-2011-3916)

  - Use-after-free errors exist related to SVG filters, Range handling and bidi handling. (CVE-2011-3904, CVE-2011-3912, CVE-2011-3913)

  - URL bar spoofing is possible due to an error related to 'view source'. (CVE-2011-3907)

  - A memory corruption error exists related to arrays of CSS properties. (CVE-2011-3909)

  - A buffer overflow exists related to PDF font handling. (CVE-2011-3915)

  - A stack-based buffer overflow exists related to the 'FileWatcher'. (CVE-2011-3917)

Google Chrome Releases reports :

[81753] Medium CVE-2011-3903: Out-of-bounds read in regex matching.
Credit to David Holloway of the Chromium development community.
[95465] Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team (Inferno). [98809] Medium CVE-2011-3906:
Out-of-bounds read in PDF parser. Credit to Aki Helin of OUSPG.
[99016] High CVE-2011-3907: URL bar spoofing with view-source. Credit to Mitja Kolsek of ACROS Security. [100863] Low CVE-2011-3908:
Out-of-bounds read in SVG parsing. Credit to Aki Helin of OUSPG.
[101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in CSS property array. Credit to Google Chrome Security Team (scarybeasts) and Chu. [101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video frame handling. Credit to Google Chrome Security Team (Cris Neckar). [101779] Medium CVE-2011-3911: Out-of-bounds read in PDF.
Credit to Google Chrome Security Team (scarybeasts) and Robert Swiecki of the Google Security Team. [102359] High CVE-2011-3912:
Use-after-free in SVG filters. Credit to Arthur Gerkis. [103921] High CVE-2011-3913: Use-after-free in Range handling. Credit to Arthur Gerkis. [104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n handling. Credit to Slawomir Blazek. [104529] High CVE-2011-3915:
Buffer overflow in PDF font handling. Credit to Atte Kettunen of OUSPG. [104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross references. Credit to Atte Kettunen of OUSPG. [105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher. Credit to Google Chrome Security Team (Marty Barbella). [107258] High CVE-2011-3904:
Use-after-free in bidi handling. Credit to Google Chrome Security Team (Inferno) and miaubiz.

The version of Google Chrome installed on the remote host is earlier than 16.0.912.63 and is affected by the following vulnerabilities:

  - Out-of-bounds read errors exist related to regex     matching, libxml, the PDF parser, the SVG parser, YUV     video frame handling, i18n handling in V8 and PDF cross     references. (CVE-2011-3903, CVE-2011-3905,     CVE-2011-3906, CVE-2011-3908, CVE-2011-3910,     CVE-2011-3911, CVE-2011-3914, CVE-2011-3916)

  - Use-after-free errors exist related to SVG filters,     Range handling and bidi handling. (CVE-2011-3904,     CVE-2011-3912, CVE-2011-3913)

  - URL bar spoofing is possible due to an error related     to 'view-source'. (CVE-2011-3907)

  - A memory corruption error exists related to arrays of     CSS properties. (CVE-2011-3909)

  - A buffer overflow exists related to PDF font handling.
    (CVE-2011-3915)

  - A stack-based buffer overflow exists related to the     'FileWatcher'. (CVE-2011-3917)

ID	Name	Product	Family	Severity
74538	openSUSE Security Update : v8 / chromium (openSUSE-2011-93)	Nessus	SuSE Local Security Checks	high
57456	GLSA-201201-03 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
800943	Google Chrome < 16.0.912.63 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
6108	Google Chrome < 16.0.912.63 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
57292	FreeBSD : chromium -- multiple vulnerabilities (68ac6266-25c3-11e1-b63a-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	high
57288	Google Chrome < 16.0.912.63 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-3903

medium

Tenable Plugins

high

high

high

high

high

high