Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.

The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a 'stack extension attack,' a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome. (CVE-2011-1071)

Versions of Google Chrome earlier than 5.0.375.125 are potentially affected by multiple vulnerabilities :

  - It is possible for memory contents to be disclosed in layout code. (Bug 42735)

  - An unspecified issue with large canvases. (Bug 43813)

  - A memory corruption issue in rendering code. (Bug 47866)

  - A memory corruption issue in SVG handling. (Bug 48284)

  - It is possible for hostnames to be truncated. (Bug 48597)

The version of Google Chrome installed on the remote host is earlier than 5.0.375.125.  As such, it is reportedly affected by multiple vulnerabilities :

  - An unspecified error in the layout code allows memory     contents to be disclosed. (Issue #42736)

  - An unspecified error exists in the handling of large     canvases. (Issue #43813)

  - A memory corruption error exists in the rendering code.
    (Issue #47866)

  - A memory corruption error exists in the handling of SVG     content. (Issue #48284)

  - An unspecified error exists regarding hostname name     truncation and incorrect eliding. (Issue #48597)

ID	Name	Product	Family	Severity
79606	F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)	Nessus	F5 Networks Local Security Checks	critical
800906	Google Chrome < 5.0.375.125 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
47859	Google Chrome < 5.0.375.125 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-2898

critical

Tenable Plugins

critical

high

high