The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) (CVE-2015-4844)

  - icu: Double free in i18n/zonemeta.cpp (CVE-2017-14952)

  - The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows     remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular     expression. (CVE-2012-5109)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) (CVE-2015-4844)

  - icu: Stack based buffer overflow in locid.cpp (CVE-2016-7415)

  - The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows     remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular     expression. (CVE-2012-5109)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Versions of Google Chrome earlier than 22.0.1229.92 are potentially affected by the following vulnerabilities :

  - An unspecified error exists related to Skia text rendering can cause the application to crash. (CVE-2012-2900)

  - A race condition exists related to audio device handling. (CVE-2012-5108)

  - Out-of-bounds read errors exist related to 'ICU' regular expressions and the compositor. (CVE-2012-5109, CVE-2012-5110)

  - The 'Pepper' plugins are missing crash monitoring. (CVE-2012-5111)

Successful exploitation of any of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user's privileges.

The version of Google Chrome installed on the remote host is earlier than 22.0.1229.92 and is, therefore, affected by the following vulnerabilities :

  - An unspecified error exists related to Skia text     rendering can cause the application to crash.
    (CVE-2012-2900)

  - A race condition exists related to audio device     handling. (CVE-2012-5108)

  - Out-of-bounds read errors exist related to 'ICU'     regular expressions and the compositor.
    (CVE-2012-5109, CVE-2012-5110)

  - The 'Pepper' plugins are missing crash monitoring.
    (CVE-2012-5111)

Successful exploitation of any of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user's privileges.

Google Chrome Releases reports :

[138208] High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG.

[147499] Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG.

[148692] Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthur Gerkis.

[151449] Medium CVE-2012-5110: Out-of-bounds read in compositor.
Credit to Google Chrome Security Team (Inferno).

[151895] Low CVE-2012-5111: Plug-in crash monitoring was missing for Pepper plug-ins. Credit to Google Chrome Security Team (Chris Evans).

ID	Name	Product	Family	Severity
199670	RHEL 6 : icu (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199595	RHEL 5 : icu (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
800947	Google Chrome < 22.0.1229.92 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
62518	Google Chrome < 22.0.1229.92 Multiple Vulnerabilities	Nessus	Windows	high
62457	FreeBSD : chromium -- multiple vulnerabilities (e6161b65-1187-11e2-afe3-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2012-5109

high

Tenable Plugins

critical

critical

high

high

high