Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

Versions of Google Chrome prior to 27.0.1453.110 are affected by the following vulnerabilities :

  - An error exists related to the renderer and bad handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU handling and SSL socket handling that could result in memory corruption. (CVE-2013-2855, CVE-2013-2862, CVE-2013-2863)

  - Use-after-free errors exist related to input and image handling, HTML5 audio, workers accessing database APIs and SVG processing. (CVE-2013-2856, CVE-2013-2857, CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad free operations. (CVE-2013-2864)  - The vendor reports various, unspecified errors exist. (CVE-2013-2865)

The version of Google Chrome installed on the remote host is a version prior to 27.0.1453.110 and is, therefore, affected by the following vulnerabilities :

  - An error exists related to the renderer and bad     handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU     handling and SSL socket handling that could result in     memory corruption. (CVE-2013-2855, CVE-2013-2862,     CVE-2013-2863)

  - Use-after-free errors exist related to input and image     handling, HTML5 audio, workers accessing database APIs     and SVG processing. (CVE-2013-2856, CVE-2013-2857,     CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-     origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad     free operations. (CVE-2013-2864)

  - The vendor reports various, unspecified errors exist.
    (CVE-2013-2865)

ID	Name	Product	Family	Severity
801017	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
6858	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
66813	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2013-2854

critical

Tenable Plugins

high

high

critical