Skip to main content

Google Chrome GPU Process Vulnerability

Last Update Date: 19 Apr 2011 11:31 Release Date: 19 Apr 2011 5739 Views

RISK: High Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multiple vulnerabilities have been identified in Google Chrome, which could be exploited by remote attackers to compromise a vulnerable system.

  1. An off-by-three error in the GPU process, which could be exploited by remote attackers to execute arbitrary code via a malicious web page.
  2. A use-after-free error in the GPU process when processing malformed data, which could be exploited by remote attackers to execute arbitrary code via a malicious web page.
  3. A heap overflow error in the GPU process when processing malformed data, which could be exploited by remote attackers to execute arbitrary code via a malicious web page.

Impact

  • Remote Code Execution

System / Technologies affected

  • Google Chrome versions prior to 10.0.648.205

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Upgrade to Google Chrome version 10.0.648.205.

Vulnerability Identifier


Source


Related Link