SB2011020401 - Multiple vulnerabilities in Techland Chrome 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011020401

SB2011020401 - Multiple vulnerabilities in Techland Chrome

Published: February 4, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011020401
Severity
Medium
Patch available
YES
Number of vulnerabilities 6
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.


1) Use-after-free (CVE-ID: CVE-2011-0777)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to image loading. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


2) Input validation error (CVE-ID: CVE-2011-0779)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.


3) Input validation error (CVE-ID: CVE-2011-0780)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.


4) Input validation error (CVE-ID: CVE-2011-0781)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors.


5) Input validation error (CVE-ID: CVE-2011-0783)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a "bad volume setting."


6) Race condition (CVE-ID: CVE-2011-0784)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio.


Remediation

Install update from vendor's website.

References