Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping.

The remote host is affected by the vulnerability described in GLSA-201111-05 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. The attacker also could cause       a Java applet to run without user confirmation.
  Workaround :

    There is no known workaround at this time.

Versions of Google Chrome earlier than 15.0.874.120 are affected by multiple vulnerabilities :

  - A double-free error exists in the Theora decoder. (CVE-2011-3892)

  - Out-of-bounds read errors exist in the MVK and Vorbis media handlers. (CVE-2011-3892)

  - A memory corruption error exists in the VP8 decoding. (CVE-2011-3894)

  - A heap overflow error exists in the Vorbis decoder. (CVE-2011-3895)

  - A buffer overflow error exists in the shader variable mapping functionality. (CVE-2011-3896)

  - A use-after-free error exists related to unspecified editing. (CVE-2011-3897)

  - In JRE7, applets are allowed to run without the proper permissions. (CVE-2011-3898)

The version of Google Chrome installed on the remote host is earlier than 15.0.874.120.  It is, therefore, potentially affected by the following vulnerabilities :

    - A double-free error exists in the Theora decoder.
      (CVE-2011-3892)

    - Out-of-bounds read errors exist in the MVK and Vorbis       media handlers. (CVE-2011-3893)

    - A memory corruption error exists in the VP8 decoding.
      (CVE-2011-3894)

    - A heap overflow error exists in the Vorbis decoder.
      (CVE-2011-3895)

    - A buffer overflow error exists in shader variable       mapping functionality. (CVE-2011-3896)

    - A use-after-free error exists related to unspecified       editing. (CVE-2011-3897)

    - In JRE7, applets are allowed to run without the       proper permissions. (CVE-2011-3898)

ID	Name	Product	Family	Severity
56901	GLSA-201111-05 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
800938	Google Chrome < 15.0.874.120 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
56779	Google Chrome < 15.0.874.120 Multiple Vulnerabilities	Nessus	Windows	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-3896

critical

Tenable Plugins

high

high

high

critical