Google Chrome < 8.0.552.237 Multiple Vulnerabilities

high Log Correlation Engine Plugin ID 800941

Synopsis

The remote host contains a web browser that is vulnerable to multiple attack vectors.

Description

Versions of Google Chrome earlier than 8.0.552.237 are potentially affected by multiple vulnerabilities :

- A browser crash exists in extensions notification handling. (58053)

- Bad pointer handling exists in node iteration. (65764)

- Multiple crashes exist when printing multi-page PDFs. (66334)

- A stale pointer exists with CSS + canvas. (66560)

- A stale pointer exists with CSS + cursors. (66748)

- A use after free error exists in PDF handling. (67100)

- A stack corruption error exists after PDF out-of-memory conditions. (67208)

- A bad memory access issue exists when handling mismatched video frame sizes. (67303)

-A stale pointer exists with SVG use elements. (67363)

- An uninitialized pointer exists in the browser which is triggered by rogue extensions. (67393)

- Multiple buffer overflows exists in the Vorbis decoder. (68115)

- A buffer overflow exists in PDF shading. (68170)

- A bad cast exists in anchor handling. (68178)

- A bad cast exists in video handling. (68181)

- A stale rendering node exists after DOM node removal. (68439)

- A stale pointer exists in speech handling. (68666)

Solution

Upgrade to Google Chrome 8.0.552.237 or later.

Plugin Details

Severity: High

ID: 800941

Family: Web Clients

Published: 12/14/2010

Nessus ID: 51511

Vulnerability Information

Patch Publication Date: 12/13/2010

Vulnerability Publication Date: 12/13/2010

Reference Information

CVE: CVE-2011-0470, CVE-2011-0471, CVE-2011-0472, CVE-2011-0473, CVE-2011-0474, CVE-2011-0475, CVE-2011-0476, CVE-2011-0477, CVE-2011-0478, CVE-2011-0479, CVE-2011-0480, CVE-2011-0481, CVE-2011-0482, CVE-2011-0483, CVE-2011-0484, CVE-2011-0485

BID: 45788

Detections

Analytics