Google Chrome < 19.0.1084.52 Multiple Vulnerabilities

Critical Nessus Plugin ID 59255


The remote host contains a web browser that is affected by multiple vulnerabilities.


The version of Google Chrome installed on the remote host is earlier than 19.0.1084.52 and is, therefore, affected by the following vulnerabilities :

- An error exists in the v8 JavaScript engine that can cause application crashes during garbage collection.

- An out-of-bounds read error exists related to 'Skia'.

- Use-after-free errors exist related to 'first-letter handling', browser cache, and invalid encrypted PDFs. (CVE-2011-3105, CVE-2011-3108, CVE-2011-3112)

- A memory corruption error exists related to websockets and SSL. (CVE-2011-3106)

- An error exists related to plugin-in JavaScript bindings that can cause the application to crash.

- An out-of-bounds write error exists related to PDF processing. (CVE-2011-3110)

- An invalid read error exists related to the v8 JavaScript engine. (CVE-2011-3111)

- An invalid cast error exists related to colorspace handling in PDF processing. (CVE-2011-3113)

- A buffer overflow error exists related to PDF functions. (CVE-2011-3114)

- A type corruption error exists related to the v8 JavaScript engine. (CVE-2011-3115)


Upgrade to Google Chrome 19.0.1084.52 or later.

See Also

Plugin Details

Severity: Critical

ID: 59255

File Name: google_chrome_19_0_1084_52.nasl

Version: 1.10

Type: local

Agent: windows

Family: Windows

Published: 2012/05/24

Updated: 2019/12/04

Dependencies: 34196

Risk Information

Risk Factor: Critical

CVSS Score Source: CVE-2011-3108

CVSS v2.0

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:google:chrome

Required KB Items: SMB/Google_Chrome/Installed

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2012/05/23

Vulnerability Publication Date: 2012/05/23

Reference Information

CVE: CVE-2011-3103, CVE-2011-3104, CVE-2011-3105, CVE-2011-3106, CVE-2011-3107, CVE-2011-3108, CVE-2011-3110, CVE-2011-3111, CVE-2011-3112, CVE-2011-3113, CVE-2011-3114, CVE-2011-3115

BID: 53679