Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Versions of Google Chrome earlier than 13.0.782.215 are potentially affected by multiple vulnerabilities :

  - An unspecified error related to command line URL parsing. (Issue #72892)
  - Use-after-free errors related to line box handling, counter nodes, custom fonts, and text searching. (Issue #82552, #88216, #88670, #90668)
  - A double-free error related to libxml XPath handling. (Issue #89402)
  - An error related to empty origins exists that can allow cross-domain violation. (Issue #87453)
  - A memory corruption error exists related to vertex handling. (Issue #89836)
  - An out-of-bounds write error exists in the v8 JavaScript engine. (Issue #91517)
  - An integer overrun error exists in the handling of uniform arrays. (Issue #91598)
  - An unspecified issue exists in memset() in PDF.

The version of Google Chrome installed on the remote host is earlier than 13.0.782.215 and is potentially affected by several vulnerabilities:

  - An unspecified error related to command line URL     parsing exists. (Issue #72492)

  - Use-after-free errors related to line box handling,     counter nodes, custom fonts, and text searching.
    (Issue #82552, #88216, #88670, #90668)

  - A double-free error related to libxml XPath handling     exists. (Issue #89402)

  - An error related to empty origins exists that can allow     cross-domain violation. (Issue #87453)

  - A memory corruption error exists related to vertex     handling. (Issue #89836)

  - An out-of-bounds write error exists in the v8     JavaScript engine. (Issue #91517)

  - An integer overrun error exists in the handling of     uniform arrays. (Issue #91598)

ID	Name	Product	Family	Severity
800914	Google Chrome < 13.0.782.215 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
6016	Google Chrome < 13.0.782.215 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
55959	Google Chrome < 13.0.782.215 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-2806

critical

Tenable Plugins

high

high

high