Google Chrome Multiple Vulnerabilities
RISK: High Risk
TYPE: Clients - Browsers
Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and potentially compromise a user's system.
- An error related to the command line can lead to "URL parsing confusion".
Note: This vulnerability affects the Windows platform only.
- A use-after-free error exists within the handling of line boxes, counter nodes and custom fonts, and text searching.
- A double-free error exists within the libxml XPath handling.
- An error related to empty origins can be exploited to violate the cross-origin policy.
- An error related to the vertex handing can be exploited to cause a memory corruption.
Note: This vulnerability affects the Windows platform only.
- An error within v8 can be exploited to cause an out-of-bounds write.
- An integer overflow exists related uniform arrays.
Note: This vulnerability affects 32bit only.
- An error exists related to "memset()" and PDF.
Note: This vulnerability affects the Linux platform only.
Impact
- Remote Code Execution
- Security Restriction Bypass
System / Technologies affected
- Google Chrome 13.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 13.0.782.215.
Vulnerability Identifier
- CVE-2011-2806
- CVE-2011-2821
- CVE-2011-2822
- CVE-2011-2823
- CVE-2011-2824
- CVE-2011-2825
- CVE-2011-2826
- CVE-2011-2827
- CVE-2011-2828
- CVE-2011-2829
- CVE-2011-2839
Source
Related Link
Share with