Google Chrome < 18.0.1025.151 Multiple Vulnerabilities

high Log Correlation Engine Plugin ID 800927

Synopsis

The remote host contains a web browser that is affected by multiple vulnerabilities.

Description

Versions of Google Chrome earlier than 18.0.1025.151 are potentially affected by the following vulnerabilities :

- An out-of-bounds read issue exists related to 'Skia' clipping. (CVE-2011-3066)

- An error exists related to cross-origin iframe replacement. (CVE-2011-3067)

- Use-after-free errors exist related to 'run-in' handling, line box editing, v8 JavaScript engine bindings, 'HTMLMediaElemet', SVG resource handling, media handling, style command application, and focus handling. (CVE-2011-3068, CVE-2011-3069, CVE-2011-3070, CVE-2011-3071, CVE-2011-3073, CVE-2011-3074, CVE-2011-3075, CVE-2011-3076)

- A cross-origin violation error exists related to pop-up windows. (CVE-2011-3072)

- A read-after-free error exists related to script binding. (CVE-2011-3077)\
- The bundled Adobe Flash Player is vulnerable to several memory corruption issues that can lead to arbitrary code execution. (CVE-2012-0724, CVE-2012-0725)

Solution

Upgrade to Google Chrome 18.0.1025.151 or later.

Plugin Details

Severity: High

ID: 800927

Family: Web Clients

Published: 4/11/2012

Nessus ID: 58644

Risk Information

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

Patch Publication Date: 4/5/2012

Vulnerability Publication Date: 4/5/2012

Reference Information

CVE: CVE-2011-3066, CVE-2011-3067, CVE-2011-3068, CVE-2011-3069, CVE-2011-3070, CVE-2011-3071, CVE-2011-3072, CVE-2011-3073, CVE-2011-3074, CVE-2011-3075, CVE-2011-3076, CVE-2011-3077, CVE-2012-0724, CVE-2012-0725

BID: 52913, 57027

Detections

Analytics