Multiple security vulnerabilities in Google Chrome

Release date: 2011-11-11
Updated on: 2011-11-14

Affected Systems:
Google Chrome 15.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460, CVE-2011-3892, CVE-2011-3893, CVE-2011-3894, CVE-2011-3895, CVE-2011-3896

Google Chrome is an Open source web browser developed by Google.

Google Chrome has multiple implementation vulnerabilities that can be exploited by malicious users to bypass certain security restrictions and control user systems.

1) the application is bound to an affected version of Adobe Flash player;

2) The Theora decoder has the dual release vulnerability;

3) errors in the MKV and Vorbis media processing programs can cause cross-border reading;

4) regression errors in VP8 decoding functions can cause memory corruption;

5) errors in the Vorbis decoding program can cause heap buffer overflow;

6) errors in the color program variable ing can cause heap buffer overflow;

7) Some Boundary functions have the post-release Reuse Vulnerability.

8) when running some JRE7 applets, the application does not require permissions.

<* Source: Chris Evans (chris@ferret.lmh.ox.ac.uk)
Aki Helin
Andrew Scherkus
Ken "strcpy" Russell

Link: http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.google.com