Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

The remote host is affected by the vulnerability described in GLSA-201111-01 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A local attacker could gain root privileges (CVE-2011-1444, fixed in       chromium-11.0.696.57).
    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. The attacker also could obtain       cookies and other sensitive information, conduct man-in-the-middle       attacks, perform address bar spoofing, bypass the same origin policy,       perform Cross-Site Scripting attacks, or bypass pop-up blocks.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote host is earlier than 14.0.835.202.  It therefore is potentially affected by the following vulnerabilities :

  - Use-after-free errors exist that are related to text     line box handling and the v8 JavaScript engine     bindings. (CVE-2011-2876, CVE-2011-2880)

  - An unspecified error exists related to stale fonts in     SVG text handling. (CVE-2011-2877)

  - A cross-origin violation error exists that could allow     access to the window prototype. (CVE-2011-2878)

  - Lifetime and threading errors exist that are related to     audio node handling. (CVE-2011-2879)

  - Unspecified errors related to hidden v8 objects and     shader translators exist that could allow memory     corruption. (CVE-2011-2881, CVE-2011-3873)

Versions of Google Chrome earlier than 14.0.835.202 are affected by multiple vulnerabilities : 

  - A use-after-free issue exists in text line box handling. (Issue 93788)

  - A stale font issue exists in SVG text handling. (Issue 95072)

  - An inappropriate cross-origin access to the window prototype exists. (Issue 95671)

  - Lifetime and threading issues exist in audio node handling. (Issue 96150)

  - A use-after-free issue exists in the v8 bindings. (Issues 97451, 97520, 97615)

  - A memory corruption issue exists in v8 hidden objects. (Issue 97784)

  - A memory corruption issue exists in the shader translator. (Issue 98089)

ID	Name	Product	Family	Severity
56686	GLSA-201111-01 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
56391	Google Chrome < 14.0.835.202 Multiple Vulnerabilities	Nessus	Windows	high
800905	Google Chrome < 14.0.835.202 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-3873

critical

Tenable Plugins

high

high

high

critical