Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-1292     Use-after-free vulnerability in the frame-loader     implementation in Google Chrome allows remote attackers     to cause a denial of service or possibly have     unspecified other impact via unknown vectors.

  - CVE-2011-1293     Use-after-free vulnerability in the HTMLCollection     implementation in Google Chrome allows remote attackers     to cause a denial of service or possibly have     unspecified other impact via unknown vectors.

  - CVE-2011-1440     Use-after-free vulnerability in Google Chrome allows     remote attackers to cause a denial of service or     possibly have unspecified other impact via vectors     related to the Ruby element and Cascading Style Sheets     (CSS) token sequences.

  - CVE-2011-1444     Race condition in the sandbox launcher implementation in     Google Chrome on Linux allows remote attackers to cause     a denial of service or possibly have unspecified other     impact via unknown vectors.

  - CVE-2011-1797     Google Chrome does not properly render tables, which     allows remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors that lead to a 'stale pointer'.

  - CVE-2011-1799     Google Chrome does not properly perform casts of     variables during interaction with the WebKit engine,     which allows remote attackers to cause a denial of     service or possibly have unspecified other impact via     unknown vectors.

Versions of Google Chrome earlier than 11.0.696.57 are potentially affected by multiple vulnerabilities :

  - A stale pointer exists in floating point handling. (61502)

  - It may be possible to bypass the pop-up blocker via plug-ins. (70538)

  - A linked-list race issue exists in database handling.  Note that this issue only affects Chrome on Linux and Mac OS. (70589)

  - There is a lack of thread safety in MIME handling. (71586)

  - A bad extension with 'tabs' permission can capture local files. (72523)

  - It is possible to crash the browser due to bad interaction with X.  Note that this issue only affects Chrome on Linux. (72910)- Multiple integer overflows exist in float rendering. (73526)

  - A same origin policy violation exists with blobs. (74653)

  - A use-after-free error exists with ruby tags and CSS. (75186)

  - A bad cast exists with floating select lists. (75347)

  - Corrupt node trees exists with mutation events. (75801)

  - Multiple stale pointers exist in layering code. (76001)

  - A race condition exists in the sandbox launcher. (76542)

  - An out-of-bounds read exists in SVG. (76646)

  - It is possible to spoof the URL bar with navigation errors and interrupted loads. (76666, 77507, 78031)

  - A stale pointer exists in drop-down list handling. (76966)

  - A stale pointer exists in height calculations. (77130)

  - A use-after-free error exists in WebSockets. (77346)

  - Multiple dangling pointers exist in file dialogs. (77349)

  - Multiple dangling pointers exist in DOM id map. (77463)

  - It is possible to spoof the URL bar with redirect and manual reload. (77786)

  - A use-after-free issue exists in DOM id handling. (79199)

  - An out-of-bounds read exists when handling multipart-encoded PDFs. (79361)

  - Multiple stale pointers exist with PDF forms. (79364)

ID	Name	Product	Family	Published	Updated	Severity
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	12/8/2010	1/6/2021	critical
55033	Debian DSA-2245-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	6/10/2011	1/4/2021	high
800937	Google Chrome < 11.0.696.57 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	4/14/2011		high

Detections

Analytics

Plugins Search

critical

high

high