The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.

Versions of Google Chrome prior to 27.0.1453.110 are affected by the following vulnerabilities :

  - An error exists related to the renderer and bad handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU handling and SSL socket handling that could result in memory corruption. (CVE-2013-2855, CVE-2013-2862, CVE-2013-2863)

  - Use-after-free errors exist related to input and image handling, HTML5 audio, workers accessing database APIs and SVG processing. (CVE-2013-2856, CVE-2013-2857, CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad free operations. (CVE-2013-2864)  - The vendor reports various, unspecified errors exist. (CVE-2013-2865)

The version of Google Chrome installed on the remote host is a version prior to 27.0.1453.110 and is, therefore, affected by the following vulnerabilities :

  - An error exists related to the renderer and bad     handles. (CVE-2013-2854)

  - Errors exist related to dev tools API, Skia GPU     handling and SSL socket handling that could result in     memory corruption. (CVE-2013-2855, CVE-2013-2862,     CVE-2013-2863)

  - Use-after-free errors exist related to input and image     handling, HTML5 audio, workers accessing database APIs     and SVG processing. (CVE-2013-2856, CVE-2013-2857,     CVE-2013-2858, CVE-2013-2860, CVE-2013-2861)

  - An unspecified error exists that could allow cross-     origin namespace pollution. (CVE-2013-2859)

  - An error exists in the PDF viewer that could allow bad     free operations. (CVE-2013-2864)

  - The vendor reports various, unspecified errors exist.
    (CVE-2013-2865)

Google Chrome Releases reports :

[242322] Medium CVE-2013-2855: Memory corruption in dev tools API.
Credit to 'daniel.zulla'.

[242224] High CVE-2013-2856: Use-after-free in input handling. Credit to miaubiz.

[240124] High CVE-2013-2857: Use-after-free in image handling. Credit to miaubiz.

[239897] High CVE-2013-2858: Use-after-free in HTML5 Audio. Credit to 'cdel921'.

[237022] High CVE-2013-2859: Cross-origin namespace pollution. to 'bobbyholley'.

[225546] High CVE-2013-2860: Use-after-free with workers accessing database APIs. Credit to Collin Payne.

[209604] High CVE-2013-2861: Use-after-free with SVG. Credit to miaubiz.

[161077] High CVE-2013-2862: Memory corruption in Skia GPU handling.
Credit to Atte Kettunen of OUSPG.

[232633] Critical CVE-2013-2863: Memory corruption in SSL socket handling. Credit to Sebastian Marchand of the Chromium development community.

[239134] High CVE-2013-2864: Bad free in PDF viewer. Credit to Mateusz Jurczyk, with contributions by Gynvael Coldwind, both from Google Security Team.

[246389] High CVE-2013-2865: Various fixes from internal audits, fuzzing and other initiatives.

ID	Name	Product	Family	Severity
801017	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
66813	Google Chrome < 27.0.1453.110 Multiple Vulnerabilities	Nessus	Windows	critical
66799	FreeBSD : chromium -- multiple vulnerabilities (4865d189-cd62-11e2-ae11-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2013-2864

critical

Tenable Plugins

high

critical

critical