Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Versions of Google Chrome earlier than 11.0.696.68 are potentially affected by multiple vulnerabilities :

  - Bad casts exist in Chromium WebKit glue. (CVE-2011-1799)

  - Integer overflows exist in the SVG filters. (CVE-2011-1800)

The version of Google Chrome installed on the remote host is earlier than 11.0.696.68.  Such versions of Chrome are affected by multiple vulnerabilities:

  - Multiple variable cast errors exist in the WebKit glue     code. These errors can be exploited and allow an     attacker to execute arbitrary code or crash the     the application. (Issue #64046)

  - Multiple integer overflows exist in the SVG filters.
    These errors can be exploited and allow an attacker to     execute arbitrary code or crash the application.
    (Issue #80608)

ID	Name	Product	Family	Severity
800948	Google Chrome < 11.0.696.68 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
53879	Google Chrome < 11.0.696.68 Multiple Vulnerabilities	Nessus	Windows	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-1800

critical

Tenable Plugins

high

high

critical