Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-0777     Use-after-free vulnerability in Google Chrome before     9.0.597.84 allows remote attackers to cause a denial of     service or possibly have unspecified other impact via     vectors related to image loading.

  - CVE-2011-0778     Google Chrome before 9.0.597.84 does not properly     restrict drag and drop operations, which might allow     remote attackers to bypass the Same Origin Policy via     unspecified vectors.

  - CVE-2011-0783     Unspecified vulnerability in Google Chrome before     9.0.597.84 allows user-assisted remote attackers to     cause a denial of service (application crash) via     vectors involving a 'bad volume setting'.

  - CVE-2011-0983     Google Chrome before 9.0.597.94 does not properly handle     anonymous blocks, which allows remote attackers to cause     a denial of service or possibly have unspecified other     impact via unknown vectors that lead to a 'stale     pointer'.

  - CVE-2011-0981     Google Chrome before 9.0.597.94 does not properly     perform event handling for animations, which allows     remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors that lead to a'stale pointer'.

  - CVE-2011-0984     Google Chrome before 9.0.597.94 does not properly handle     plug-ins, which allows remote attackers to cause a     denial of service (out-of-bounds read) via unspecified     vectors.

  - CVE-2011-0985     Google Chrome before 9.0.597.94 does not properly     perform process termination upon memory exhaustion,     which has unspecified impact and remote attack vectors.

Versions of Google Chrome earlier than 9.0.597.94 are potentially affected by multiple vulnerabilities :

  - A stale pointer exists in animation event handling. (67234)  - A use-after-free issue exists in SVG font faces. (68120)

  - A stale pointer exists with anonymous block handling. (69556)

  - An out-of-bounds read exists in plug-in handling. (69970)

  - An error exists in the handling of out-of-memory conditions and does not always allow processes to be properly terminated. (70456)

  - This version bundles a version of Adobe Flash affected by numerous vulnerabilities. (CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)

The version of Google Chrome installed on the remote host is earlier than 9.0.597.94.  Such versions are reportedly affected by multiple vulnerabilities :

  - An error exists in the processing of animations events     related to stale pointers. (Issue #67234)

  - An error exists in the processing of SVG font faces     which allows attempts to use already freed resources.
    (Issue #68120)

  - An error exists in the processing of anonymous blocks     related to stale pointers. (Issue #69556)

  - Errors exist in the processing of plugins which allow     out-of-bounds reads to occur. (Issue #69970)

  - An error exists in the handling of out-of-memory     conditions and does not always allow processes to be     properly terminated. (Issue #70456)

ID	Name	Product	Family	Severity
52029	Debian DSA-2166-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	critical
800945	Google Chrome < 9.0.597.94 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
51921	Google Chrome < 9.0.597.94 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-0985

critical

Tenable Plugins

critical

high

high