Skip to main content

Google Chrome Multiple Vulnerabilities

Last Update Date: 9 Jun 2011 10:49 Release Date: 9 Jun 2011 6372 Views

RISK: High Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to disclose potentially sensitive information, conduct injection attacks, bypass certain security restrictions, and potentially compromise a user's system.

  1. A use-after-free error exists within the float handling, accessibility support, developer tools and image loader.
  2. An error related to CSS can be exploited to leak history information.
  3. An unspecified error can be exploited to bypass the extensions permissions.
  4. An error related to a stale pointer exists within the extension framework.
  5. An error related to extensions can be exploited to inject script code into new tab pages.
  6. An unspecified error related to history deletion can be exploited to corrupt browser memory.
  7. An unspecified error allows for "extension injection" into "chrome://" pages.
  8. An error within v8 and an error related to the DOM can be exploited to bypass the same origin restriction.

Impact

  • Cross-Site Scripting
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure

System / Technologies affected

  • Google Chrome 11.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Upgrade to version 12.0.742.91.

Vulnerability Identifier


Source


Related Link