Skip to main content

Google Chrome Multiple Vulnerabilities

Last Update Date: 2 Aug 2012 18:30 Release Date: 2 Aug 2012 4988 Views

RISK: High Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.

  1. An error when handling renders can be exploited to bypass the cross-process policy and cause interference. This vulnerability affect the Linux platform only.
  2. The application does not properly re-prompt the user when downloading multiple files and can be exploited to trick the user into downloading a malicious file.
  3. An error when handling drag and drop events can be exploited to access certain restricted files.
  4. Multiple errors including integer overflow, use-after-free and out-of-bounds write error exist within the PDF viewer.
  5. A use-after-free error exists when handling object linkage in PDFs and CSS DOM objects.
  6. An error within the "webRequest" module can be exploited to cause interference with the Chrome Web Store.
  7. An error within the WebP decoder can be exploited to cause a buffer overflow.
  8. An unspecified error exists within tab handling. This vulnerability affect the Linux platform only.
  9. An out-of-bounds access error exists when clicking in date picker.

Impact

  • Remote Code Execution
  • Security Restriction Bypass

System / Technologies affected

  • Google Chrome 20.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link