Google Chrome < 8.0.552.237 Multiple Vulnerabilities

high Nessus Network Monitor Plugin ID 5742


The remote host contains a web browser that is vulnerable to multiple attack vectors.


Versions of Google Chrome earlier than 8.0.552.237 are potentially affected by multiple vulnerabilities :

- A browser crash exists in extensions notification handling. (58053)

- Bad pointer handling exists in node iteration. (65764)

- Multiple crashes exist when printing multi-page PDFs. (66334)

- A stale pointer exists with CSS + canvas. (66560)

- A stale pointer exists with CSS + cursors. (66748)

- A use after free error exists in PDF handling. (67100)

- A stack corruption error exists after PDF out-of-memory conditions. (67208)

- A bad memory access issue exists when handling mismatched video frame sizes. (67303)

-A stale pointer exists with SVG use elements. (67363)

- An uninitialized pointer exists in the browser which is triggered by rogue extensions. (67393)

- Multiple buffer overflows exists in the Vorbis decoder. (68115)

- A buffer overflow exists in PDF shading. (68170)

- A bad cast exists in anchor handling. (68178)

- A bad cast exists in video handling. (68181)

- A stale rendering node exists after DOM node removal. (68439)

- A stale pointer exists in speech handling. (68666)


Upgrade to Google Chrome 8.0.552.237 or later.

See Also

Plugin Details

Severity: High

ID: 5742

Family: Web Clients

Published: 12/14/2010

Updated: 3/6/2019

Nessus ID: 51511

Risk Information


Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Patch Publication Date: 12/13/2010

Vulnerability Publication Date: 12/13/2010

Reference Information

CVE: CVE-2011-0480, CVE-2011-0482, CVE-2011-0470, CVE-2011-0471, CVE-2011-0472, CVE-2011-0473, CVE-2011-0474, CVE-2011-0475, CVE-2011-0476, CVE-2011-0477, CVE-2011-0478, CVE-2011-0479, CVE-2011-0481, CVE-2011-0483, CVE-2011-0484, CVE-2011-0485

BID: 45788