Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.

Versions of Google Chrome earlier than 16.0.912.63 are potentially affected by multiple vulnerabilities :

  - Out-of-bounds read errors exist related to regex matching, libxml, the PDF parser, the SVG parser, YUV video frame handling, il8n handling in V8 and PDF cross references. (CVE-2011-3903, CVE-2011-3905, CVE-2011-3906, CVE-2011-3908, CVE-2011-3910, CVE-2011-3911, CVE-2011-3914, CVE-2011-3916)

  - Use-after-free errors exist related to SVG filters, Range handling and bidi handling. (CVE-2011-3904, CVE-2011-3912, CVE-2011-3913)

  - URL bar spoofing is possible due to an error related to 'view source'. (CVE-2011-3907)

  - A memory corruption error exists related to arrays of CSS properties. (CVE-2011-3909)

  - A buffer overflow exists related to PDF font handling. (CVE-2011-3915)

  - A stack-based buffer overflow exists related to the 'FileWatcher'. (CVE-2011-3917)

Google Chrome Releases reports :

[81753] Medium CVE-2011-3903: Out-of-bounds read in regex matching.
Credit to David Holloway of the Chromium development community.
[95465] Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team (Inferno). [98809] Medium CVE-2011-3906:
Out-of-bounds read in PDF parser. Credit to Aki Helin of OUSPG.
[99016] High CVE-2011-3907: URL bar spoofing with view-source. Credit to Mitja Kolsek of ACROS Security. [100863] Low CVE-2011-3908:
Out-of-bounds read in SVG parsing. Credit to Aki Helin of OUSPG.
[101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in CSS property array. Credit to Google Chrome Security Team (scarybeasts) and Chu. [101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video frame handling. Credit to Google Chrome Security Team (Cris Neckar). [101779] Medium CVE-2011-3911: Out-of-bounds read in PDF.
Credit to Google Chrome Security Team (scarybeasts) and Robert Swiecki of the Google Security Team. [102359] High CVE-2011-3912:
Use-after-free in SVG filters. Credit to Arthur Gerkis. [103921] High CVE-2011-3913: Use-after-free in Range handling. Credit to Arthur Gerkis. [104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n handling. Credit to Slawomir Blazek. [104529] High CVE-2011-3915:
Buffer overflow in PDF font handling. Credit to Atte Kettunen of OUSPG. [104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross references. Credit to Atte Kettunen of OUSPG. [105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher. Credit to Google Chrome Security Team (Marty Barbella). [107258] High CVE-2011-3904:
Use-after-free in bidi handling. Credit to Google Chrome Security Team (Inferno) and miaubiz.

The version of Google Chrome installed on the remote host is earlier than 16.0.912.63 and is affected by the following vulnerabilities:

  - Out-of-bounds read errors exist related to regex     matching, libxml, the PDF parser, the SVG parser, YUV     video frame handling, i18n handling in V8 and PDF cross     references. (CVE-2011-3903, CVE-2011-3905,     CVE-2011-3906, CVE-2011-3908, CVE-2011-3910,     CVE-2011-3911, CVE-2011-3914, CVE-2011-3916)

  - Use-after-free errors exist related to SVG filters,     Range handling and bidi handling. (CVE-2011-3904,     CVE-2011-3912, CVE-2011-3913)

  - URL bar spoofing is possible due to an error related     to 'view-source'. (CVE-2011-3907)

  - A memory corruption error exists related to arrays of     CSS properties. (CVE-2011-3909)

  - A buffer overflow exists related to PDF font handling.
    (CVE-2011-3915)

  - A stack-based buffer overflow exists related to the     'FileWatcher'. (CVE-2011-3917)

ID	Name	Product	Family	Severity
74538	openSUSE Security Update : v8 / chromium (openSUSE-2011-93)	Nessus	SuSE Local Security Checks	high
800943	Google Chrome < 16.0.912.63 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
57292	FreeBSD : chromium -- multiple vulnerabilities (68ac6266-25c3-11e1-b63a-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	high
57288	Google Chrome < 16.0.912.63 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2011-3915

critical

Tenable Plugins

high

high

high

high