Multiple security vulnerabilities in Google Chrome versions earlier than 19.0.20.4.52

Release date:
Updated on:

Affected Systems:
Google Chrome 19.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53679
Cve id: CVE-2011-3103, CVE-2011-3104, CVE-2011-3105, CVE-2011-3106, CVE-2011-3107, CVE-2011-3108, CVE-2011-3109, CVE-2011-3110, CVE-2011-3111, CVE-2011-3112, CVE-2011-3113

Google Chrome is a simple and efficient Web browser tool developed by Google.

Google Chrome versions earlier than 19.0.20.4.52 have multiple security vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code in the browser to bypass security restrictions or cause DOS.

1) unknown details in V8 useless unit recycling may cause a crash;

2) an out-of-bounds reading error exists in Skia;

3) There is a release reuse error in the first letter processing;

4) An error in Websocket in SSL can be exploited to destroy the memory;

5) unknown details of JavaScript binding in the plug-in may cause a crash;

6) The browser cache has an error of reuse after release;

7) The gtk ui has a Failover error;

8) some errors in PDF processing can be exploited to cause cross-border writing;

9) An invalid reading error exists in V8;

10) An error occurred while reusing encrypted PDF files after release;

11) invalid Conversion error in the color space in PDF;

12) errors in PDF functions can be exploited to cause buffer overflow;

13) A type destruction error exists in V8;

<* Source: Chromium development community (Brett Wilson)
Miaubiz
Christian Holler
Inferno
Scarybeasts
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.google.com