Google Chrome < 14.0.835.163 Multiple Vulnerabilities

high Nessus Network Monitor Plugin ID 6024

Synopsis

The remote host contains a web browser that is vulnerable to multiple attack vectors.

Description

Versions of Google Chrome earlier than 14.0.835.163 are affected by multiple vulnerabilities :

- A race condition exists related to the certificate cache. (Issue 49377)

- The Windows Media Player plugin allows click-free access to the system Flash. (Issue 51464)
- PIC / pie compiler lags are not used. (Linux only)(Issue 57908)
- MIME types are not treated authoritatively at plugin load time. (Issue 75070)
- An unspecified error allows V8 script object wrappers to crash. (Issue 76771)
- The included PDF functionality contains a garbage collection error. (Issue 78639)
- The Mac installer insecurely handles lock files. (Mac only)(Issue 80680) - Out-of-bounds read issues exist related to media buffers, mp3 files, box handling, Khmer characters, video handling, Tibetan characters, and triangle arrays. (Issues 82438, 85041, 89991, 90134, 90173, 95563, 95625)
- An unspecified error allows data displayed in the URL to be spoofed. (Issue 83031)
- Use-after-free error exist related to unload event handling, the document loader, plugin handling, ruby table style handling, and the focus controller. (Issues 89219, 89330, 91197, 92651, 94800, 93420, 93587)
- The URL bar can be spoofed in an unspecified manner related to the forward button. (Issue 89564)
- A NULL pointer error exists related to WebSockets. Issue 89795)
An off-by-one error exists related to the V8 JavaScript engine. (Issue 91120)
- A stale node error exists related to CSS stylesheet handling. (Issue 92959)
- A cross-origin bypass error exists related to the V8 JavaScript engine. (Issue 93416)
- A double-free error exists related to XPath handling in libxml. (Issue 93472)
- Incorrect permissions are assigned to non-gallery pages. (Issue 93497)
- An improper string read occurs in the included PDF functionality. (Issue 93596)
- An unspecified error allows unintended access to objects build in to the V8 JavaScript engine. (Issue 93906)
- Self-signed certificates are not pinned properly. (Issue 95917)
- A variable-type confusion issue exists in the V8 JavaScript engine related to object sealing. (Issue 95920)

Solution

Upgrade to Google Chrome 14.0.835.163 or later.

Plugin Details

Severity: High

ID: 6024

Family: Web Clients

Published: 9/21/2011

Updated: 3/6/2019

Nessus ID: 56230

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:google:chrome

Patch Publication Date: 9/20/2011

Vulnerability Publication Date: 9/20/2011

Reference Information

CVE: CVE-2011-2834

BID: 49658

Detections

Analytics