Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a "bad volume setting."

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-0777     Use-after-free vulnerability in Google Chrome before     9.0.597.84 allows remote attackers to cause a denial of     service or possibly have unspecified other impact via     vectors related to image loading.

  - CVE-2011-0778     Google Chrome before 9.0.597.84 does not properly     restrict drag and drop operations, which might allow     remote attackers to bypass the Same Origin Policy via     unspecified vectors.

  - CVE-2011-0783     Unspecified vulnerability in Google Chrome before     9.0.597.84 allows user-assisted remote attackers to     cause a denial of service (application crash) via     vectors involving a 'bad volume setting'.

  - CVE-2011-0983     Google Chrome before 9.0.597.94 does not properly handle     anonymous blocks, which allows remote attackers to cause     a denial of service or possibly have unspecified other     impact via unknown vectors that lead to a 'stale     pointer'.

  - CVE-2011-0981     Google Chrome before 9.0.597.94 does not properly     perform event handling for animations, which allows     remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors that lead to a'stale pointer'.

  - CVE-2011-0984     Google Chrome before 9.0.597.94 does not properly handle     plug-ins, which allows remote attackers to cause a     denial of service (out-of-bounds read) via unspecified     vectors.

  - CVE-2011-0985     Google Chrome before 9.0.597.94 does not properly     perform process termination upon memory exhaustion,     which has unspecified impact and remote attack vectors.

Versions of Google Chrome earlier than 9.0.597.84 are potentially affected by multiple vulnerabilities :

  - A minor sandbox leak exists in stat(). Note this issue only affects Google Chrome on Mac OS. (429889)

  - A use-after-free issue exists in image loading. (55381)

  - An unspecified issue exists relating to cross-origin drag and drop. (59081)

  - A browser crash can occur when handling extensions with a missing key. (62791)

  - A browser crash issue exists relating to the PDF event handler. (64051)

  - An unspecified issue exists relating t the merging of autofill profiles. (65669)

  - A potential crash exists in the Mac OS 10.5 SSL libraries. Note that this issue only affects Google Chrome on Mac OS. (66931)

  - A browser crash issue exists relating to bad volume settings (68244)

  - A race condition exists in audio handling. (69195)

The version of Google Chrome installed on the remote host is earlier than 9.0.597.84.  It therefore is reportedly affected by multiple vulnerabilities :

  - A use-after-free issue exists in image loading.
    (Issue #55381)

  - An unspecified issue exists relating to cross-origin     drag and drop. (Issue #59081)

  - A browser crash can occur when handling extensions with     a missing key. (Issue #62791)

  - A browser crash issue exists relating to the PDF event     handler. (Issue #64051)

  - An unspecified issue exists relating to the merging of     autofill profiles. (Issue #65669)

  - A browser crash issue exists relating to bad volume     settings. (Issue #68244)

  - A race condition exists in audio handling.
    (Issue #69195)

ID	Name	Product	Family	Severity
52029	Debian DSA-2166-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	critical
800942	Google Chrome < 9.0.597.84 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
51872	Google Chrome < 9.0.597.84 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-0783

medium

Tenable Plugins

critical

high

high