Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Google Chrome < 14.0.835.163 Multiple Vulnerabilities

High

Synopsis

The remote host contains a web browser that is vulnerable to multiple attack vectors.

Description

Versions of Google Chrome earlier than 14.0.835.163 are affected by multiple vulnerabilities :

- A race condition exists related to the certificate cache. (Issue 49377)

- The Windows Media Player plugin allows click-free access to the system Flash. (Issue 51464) - PIC / pie compiler lags are not used. (Linux only)(Issue 57908) - MIME types are not treated authoritatively at plugin load time. (Issue 75070) - An unspecified error allows V8 script object wrappers to crash. (Issue 76771) - The included PDF functionality contains a garbage collection error. (Issue 78639) - The Mac installer insecurely handles lock files. (Mac only)(Issue 80680) - Out-of-bounds read issues exist related to media buffers, mp3 files, box handling, Khmer characters, video handling, Tibetan characters, and triangle arrays. (Issues 82438, 85041, 89991, 90134, 90173, 95563, 95625) - An unspecified error allows data displayed in the URL to be spoofed. (Issue 83031) - Use-after-free error exist related to unload event handling, the document loader, plugin handling, ruby table style handling, and the focus controller. (Issues 89219, 89330, 91197, 92651, 94800, 93420, 93587) - The URL bar can be spoofed in an unspecified manner related to the forward button. (Issue 89564) - A NULL pointer error exists related to WebSockets. Issue 89795) An off-by-one error exists related to the V8 JavaScript engine. (Issue 91120) - A stale node error exists related to CSS stylesheet handling. (Issue 92959) - A cross-origin bypass error exists related to the V8 JavaScript engine. (Issue 93416) - A double-free error exists related to XPath handling in libxml. (Issue 93472) - Incorrect permissions are assigned to non-gallery pages. (Issue 93497) - An improper string read occurs in the included PDF functionality. (Issue 93596) - An unspecified error allows unintended access to objects build in to the V8 JavaScript engine. (Issue 93906) - Self-signed certificates are not pinned properly. (Issue 95917) - A variable-type confusion issue exists in the V8 JavaScript engine related to object sealing. (Issue 95920)

Solution

Upgrade to Google Chrome 14.0.835.163 or later.