Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.

The remote host is affected by the vulnerability described in GLSA-201309-16 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition. Furthermore, a remote attacker       may be able to bypass security restrictions or have other, unspecified,       impact.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in the Chromium web browser.

  - CVE-2013-2855     The Developer Tools API in Chromium before 27.0.1453.110     allows remote attackers to cause a denial of service     (memory corruption) or possibly have unspecified other     impact via unknown vectors.

  - CVE-2013-2856     Use-after-free vulnerability in Chromium before     27.0.1453.110 allows remote attackers to cause a denial     of service or possibly have unspecified other impact via     vectors related to the handling of input.

  - CVE-2013-2857     Use-after-free vulnerability in Chromium before     27.0.1453.110 allows remote attackers to cause a denial     of service or possibly have unspecified other impact via     vectors related to the handling of images.

  - CVE-2013-2858     Use-after-free vulnerability in the HTML5 Audio     implementation in Chromium before 27.0.1453.110 allows     remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors.

  - CVE-2013-2859     Chromium before 27.0.1453.110 allows remote attackers to     bypass the Same Origin Policy and trigger namespace     pollution via unspecified vectors.

  - CVE-2013-2860     Use-after-free vulnerability in Chromium before     27.0.1453.110 allows remote attackers to cause a denial     of service or possibly have unspecified other impact via     vectors involving access to a database API by a worker     process.

  - CVE-2013-2861     Use-after-free vulnerability in the SVG implementation     in Chromium before 27.0.1453.110 allows remote attackers     to cause a denial of service or possibly have     unspecified other impact via unknown vectors.

  - CVE-2013-2862     Skia, as used in Chromium before 27.0.1453.110, does not     properly handle GPU acceleration, which allows remote     attackers to cause a denial of service (memory     corruption) or possibly have unspecified other impact     via unknown vectors.

  - CVE-2013-2863     Chromium before 27.0.1453.110 does not properly handle     SSL sockets, which allows remote attackers to execute     arbitrary code or cause a denial of service (memory     corruption) via unspecified vectors.

  - CVE-2013-2865     Multiple unspecified vulnerabilities in Chromium before     27.0.1453.110 allow attackers to cause a denial of     service or possibly have other impact via unknown     vectors.

Versions of Google Chrome prior to 27.0.1453.110 are affected by the following vulnerabilities :

  - An error exists related to the renderer and bad handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU handling and SSL socket handling that could result in memory corruption. (CVE-2013-2855, CVE-2013-2862, CVE-2013-2863)

  - Use-after-free errors exist related to input and image handling, HTML5 audio, workers accessing database APIs and SVG processing. (CVE-2013-2856, CVE-2013-2857, CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad free operations. (CVE-2013-2864)  - The vendor reports various, unspecified errors exist. (CVE-2013-2865)

The version of Google Chrome installed on the remote host is a version prior to 27.0.1453.110 and is, therefore, affected by the following vulnerabilities :

  - An error exists related to the renderer and bad     handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU     handling and SSL socket handling that could result in     memory corruption. (CVE-2013-2855, CVE-2013-2862,     CVE-2013-2863)

  - Use-after-free errors exist related to input and image     handling, HTML5 audio, workers accessing database APIs     and SVG processing. (CVE-2013-2856, CVE-2013-2857,     CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-     origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad     free operations. (CVE-2013-2864)

  - The vendor reports various, unspecified errors exist.
    (CVE-2013-2865)

Google Chrome Releases reports :

[242322] Medium CVE-2013-2855: Memory corruption in dev tools API.
Credit to 'daniel.zulla'.

[242224] High CVE-2013-2856: Use-after-free in input handling. Credit to miaubiz.

[240124] High CVE-2013-2857: Use-after-free in image handling. Credit to miaubiz.

[239897] High CVE-2013-2858: Use-after-free in HTML5 Audio. Credit to 'cdel921'.

[237022] High CVE-2013-2859: Cross-origin namespace pollution. to 'bobbyholley'.

[225546] High CVE-2013-2860: Use-after-free with workers accessing database APIs. Credit to Collin Payne.

[209604] High CVE-2013-2861: Use-after-free with SVG. Credit to miaubiz.

[161077] High CVE-2013-2862: Memory corruption in Skia GPU handling.
Credit to Atte Kettunen of OUSPG.

[232633] Critical CVE-2013-2863: Memory corruption in SSL socket handling. Credit to Sebastian Marchand of the Chromium development community.

[239134] High CVE-2013-2864: Bad free in PDF viewer. Credit to Mateusz Jurczyk, with contributions by Gynvael Coldwind, both from Google Security Team.

[246389] High CVE-2013-2865: Various fixes from internal audits, fuzzing and other initiatives.

ID	Name	Product	Family	Severity
70112	GLSA-201309-16 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
66852	Debian DSA-2706-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	critical
801017	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
66813	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Nessus	Windows	critical
66799	FreeBSD : chromium -- multiple vulnerabilities (4865d189-cd62-11e2-ae11-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2013-2857

critical

Tenable Plugins

critical

critical

high

critical

critical