Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.

Chromium update to version 18.0.1022 fixes several security issues

The remote host is affected by the vulnerability described in GLSA-201201-17 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium. Please review       the CVE identifiers and release notes referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       site using Chromium, possibly resulting in the execution of arbitrary       code with the privileges of the process, or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Versions of Google Chrome earlier than 16.0.912.77 are potentially affected by multiple vulnerabilities :

  - Use-after-free errors exist related to DOM selections, DOM handling, and Safe Browsing functionality. (CVE-2011-3924, CVE-2011-3925, CVE-2011-3928)

  - A heap-based buffer overflow exists in the 'tree builder'. (CVE-2011-3926)

  - An error exists related to an uninitialized value in 'Skia'. (CVE-2011-3927)

The version of Google Chrome installed on the remote host is earlier than 16.0.912.77 and is, therefore, affected the following vulnerabilities:

  - Use-after-free errors exist related to DOM selections,     DOM handling and Safe Browsing functionality.
    (CVE-2011-3924, CVE-2011-3925, CVE-2011-3928)

  - A heap-based buffer overflow exists in the 'tree     builder'. (CVE-2011-3926)

  - An error exists related to an uninitialized value in     'Skia'. (CVE-2011-3927)

Google Chrome Releases reports :

[106672] High CVE-2011-3921: Use-after-free in animation frames.
Credit to Boris Zbarsky of Mozilla. [107128] High CVE-2011-3919:
Heap-buffer-overflow in libxml. Credit to Juri Aedla. [108006] High CVE-2011-3922: Stack-buffer-overflow in glyph handling. Credit to Google Chrome Security Team (Cris Neckar).

[107182] Critical CVE-2011-3925: Use-after-free in Safe Browsing navigation. Credit to Chamal de Silva.

ID	Name	Product	Family	Severity
74543	openSUSE Security Update : chromium / v8 (openSUSE-2012-107)	Nessus	SuSE Local Security Checks	high
57723	GLSA-201201-17 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
800931	Google Chrome < 16.0.912.77 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
57666	Google Chrome < 16.0.912.77 Multiple Vulnerabilities	Nessus	Windows	high
57454	FreeBSD : chromium -- multiple vulnerabilities (1a1aef8e-3894-11e1-8b5c-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2011-3925

high

Tenable Plugins

high

high

high

high

high