Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-0779     Google Chrome before 9.0.597.84 does not properly handle     a missing key in an extension, which allows remote     attackers to cause a denial of service (application     crash) via a crafted extension.

  - CVE-2011-1290     Integer overflow in WebKit allows remote attackers to     execute arbitrary code via unknown vectors, as     demonstrated by Vincenzo Iozzo, Willem Pinckaers, and     Ralf-Philipp Weinmann during a Pwn2Own competition at     CanSecWest 2011.

Versions of Google Chrome earlier than 9.0.597.84 are potentially affected by multiple vulnerabilities :

  - A minor sandbox leak exists in stat(). Note this issue only affects Google Chrome on Mac OS. (429889)

  - A use-after-free issue exists in image loading. (55381)

  - An unspecified issue exists relating to cross-origin drag and drop. (59081)

  - A browser crash can occur when handling extensions with a missing key. (62791)

  - A browser crash issue exists relating to the PDF event handler. (64051)

  - An unspecified issue exists relating t the merging of autofill profiles. (65669)

  - A potential crash exists in the Mac OS 10.5 SSL libraries. Note that this issue only affects Google Chrome on Mac OS. (66931)

  - A browser crash issue exists relating to bad volume settings (68244)

  - A race condition exists in audio handling. (69195)

The version of Google Chrome installed on the remote host is earlier than 9.0.597.84.  It therefore is reportedly affected by multiple vulnerabilities :

  - A use-after-free issue exists in image loading.
    (Issue #55381)

  - An unspecified issue exists relating to cross-origin     drag and drop. (Issue #59081)

  - A browser crash can occur when handling extensions with     a missing key. (Issue #62791)

  - A browser crash issue exists relating to the PDF event     handler. (Issue #64051)

  - An unspecified issue exists relating to the merging of     autofill profiles. (Issue #65669)

  - A browser crash issue exists relating to bad volume     settings. (Issue #68244)

  - A race condition exists in audio handling.
    (Issue #69195)

ID	Name	Product	Family	Severity
52674	Debian DSA-2192-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	critical
800942	Google Chrome < 9.0.597.84 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
51872	Google Chrome < 9.0.597.84 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-0779

medium

Tenable Plugins

critical

high

high