Multiple security vulnerabilities in Google Chrome versions earlier than 13.0.782.215

Release date:
Updated on:

Affected Systems:
Google Chrome 9.x
Google Chrome 8.x
Google Chrome 6.x
Google Chrome 5.x
Google Chrome 11.x
Google Chrome 10.x
Unaffected system:
Google Chrome 13.0.782.215
Description:
--------------------------------------------------------------------------------
Bugtraq id: 49279
Cve id: CVE-2011-2806, CVE-2011-2821, CVE-2011-2822, CVE-2011-2823, CVE-2011-2824, CVE-2011-2825, CVE-2011-2826, CVE-2011-2827, CVE-2011-2828

Google Chrome is an open-source web browser developed by Google.

Google Chrome versions earlier than 13.0.782.215 have multiple security vulnerabilities. Remote attackers can exploit these vulnerabilities to execute arbitrary code, cause DoS, perform spoofing attacks, and bypass the same-source policy through affected applications.

1) a command line error may cause "URL resolution confusion ";

2) Release and reuse existing wireframes during processing;

3) when handling counting nodes, they are released and reused;

4) when processing custom fonts, they are released and reused;

5) The libxml XPath processing has the dual release vulnerability;

6) errors related to null sources may violate cross-source policies;

7) memory corruption can be caused by vertex processing errors;

8) text search is released and reused;

9) errors in v8 can cause cross-border write;

10) integer overflow exists in the unified array;

11) "memset ()" and PDF-related errors;

<* Source: Vladimir Vorontsov

Link: http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.google.com