Skip to main content

Google Chrome Multiple Vulnerabilities

Last Update Date: 6 Mar 2012 11:12 Release Date: 6 Mar 2012 4412 Views

RISK: Medium Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multipule vulnerabilities have been identified in Google Chrome, where one has an unknown impact and others can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.

  1. A use-after-free error exists within v8 element wrapper handling.
  2. A use-after-free error exists within SVG value handling.
  3. A buffer overflow exists within the Skia drawing library.
  4. A use-after-free error exists within SVG document handling.
  5. A use-after-free error exists within SVG use handling.
  6. A casting error exists within line box handling.
  7. A casting error exists within anonymous block splitting.
  8. A use-after-free error exists within multi-column handling.
  9. A use-after-free error exists within quote handling.
  10. An out-of-bounds read error exists within text handling.
  11. A use-after-free error exists within class attribute handling.
  12. A use-after-free error exists within table section handling.
  13. A use-after-free error exists within flexbox with floats handling.
  14. A use-after-free error exists within SVG animation elements handling.
  15. The application bundles a vulnerable version of the Adobe Flash player.

Impact

  • Cross-Site Scripting
  • Security Restriction Bypass

System / Technologies affected

  • Google Chrome 17.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to version 17.0.963.65.

Vulnerability Identifier


Source

 


Related Link