Google Chrome < 19.0.1084.52 Multiple Vulnerabilities

high Nessus Network Monitor Plugin ID 6490

Synopsis

The remote host contains a web browser that is affected by multiple vulnerabilities.

Description

Versions of Google Chrome earlier than 19.0.1084.52 are potentially affected by the following vulnerabilities :

- An error exists in the v8 JavaScript engine that can cause application crashes during garbage collection. (CVE-2011-3103)

- An out-of-bounds read error exists related to 'Skia'. (CVE-2011-3104)

- Use-after-free errors exists related to 'first-letter handling', browser cache, and invalid encrypted PDFs. (CVE-2011-3105, CVE-2011-3108, CVE-2011-3112)

- A memory corruption error exists related to websockets and SSL. (CVE-2011-3106)

- An error exists related to plugin-in JavaScript bindings that can cause the application to crash. (CVE-2011-3107)

- An out-of-bounds write error exists related to PDF processing. (CVE-2011-3110)

- An invalid read error exists related to the v8 Java Script engine. (CVE-2011-3111)

- An invalid cast error exists related to colorspace handling in PDF processing. (CVE-2011-3113)

- A buffer overflow error exists related to PDF functions. (CVE-2011-3114)

- A type corruption error exists related to the v8 JavaScript engine. (CVE-2011-3115)

Solution

Upgrade to Google Chrome 19.0.1084.52 or later.

Plugin Details

Severity: High

ID: 6490

Family: Web Clients

Published: 5/24/2012

Updated: 3/6/2019

Nessus ID: 59255

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:google:chrome

Patch Publication Date: 5/23/2012

Vulnerability Publication Date: 5/23/2012

Reference Information

CVE: CVE-2011-3103

BID: 53679

Detections

Analytics