Main Vulnerability Database SB2011091901

SB2011091901 - Multiple vulnerabilities in Techland Chrome

Published: September 19, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011091901

Severity

Medium

Patch available

YES

Number of vulnerabilities 30

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 30 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2011-2830)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google V8, as used in Google Chrome before 14.0.835.163, does not properly implement script object wrappers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.

2) NULL pointer dereference (CVE-ID: CVE-2011-2849)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via unspecified vectors.

3) Out-of-bounds read (CVE-ID: CVE-2011-2850)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

4) Out-of-bounds read (CVE-ID: CVE-2011-2851)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

5) Off-by-one (CVE-ID: CVE-2011-2852)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

6) Use-after-free (CVE-ID: CVE-2011-2853)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to plug-in handling. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

7) Use-after-free (CVE-ID: CVE-2011-2854)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to "ruby / table style handing. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

8) Improper Neutralization of Special Elements in Output Used by a Downstream Component (CVE-ID: CVE-2011-2855)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."

9) Origin validation error (CVE-ID: CVE-2011-2856)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

10) Use-after-free (CVE-ID: CVE-2011-2857)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to the focus controller. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

11) Out-of-bounds read (CVE-ID: CVE-2011-2858)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

12) Incorrect default permissions (CVE-ID: CVE-2011-2859)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and attack vectors.

13) Use-after-free (CVE-ID: CVE-2011-2860)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to table styles. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

14) Input validation error (CVE-ID: CVE-2011-2861)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation.

15) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2011-2862)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors.

16) Out-of-bounds read (CVE-ID: CVE-2011-2864)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

17) Improper Certificate Validation (CVE-ID: CVE-2011-2874)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.

18) Type Confusion (CVE-ID: CVE-2011-2875)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

19) Out-of-bounds read (CVE-ID: CVE-2011-3234)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

20) Double Free (CVE-ID: CVE-2011-2834)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

21) Race condition (CVE-ID: CVE-2011-2835)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache.

22) Input validation error (CVE-ID: CVE-2011-2836)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content.

23) Input validation error (CVE-ID: CVE-2011-2838)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors.

24) Input validation error (CVE-ID: CVE-2011-2840)

The vulnerability allows a remote non-authenticated attacker to manipulate data.

Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction."

25) Input validation error (CVE-ID: CVE-2011-2841)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

26) Out-of-bounds read (CVE-ID: CVE-2011-2843)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

27) Out-of-bounds read (CVE-ID: CVE-2011-2844)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

28) Use-after-free (CVE-ID: CVE-2011-2846)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to unload event handling. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

29) Use-after-free (CVE-ID: CVE-2011-2847)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing a crafted document. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

30) Input validation error (CVE-ID: CVE-2011-2848)

The vulnerability allows a remote non-authenticated attacker to manipulate data.

Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button.

Remediation

Install update from vendor's website.

SB2011091901 - Multiple vulnerabilities in Techland Chrome

Breakdown by Severity

Description

Remediation

References