[PCWorks] Google Chrome Multiple Vulnerabilities
- From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
- To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
- Date: Sat, 12 Jan 2013 03:08:22 -0600
TITLE:
Google Chrome Multiple Vulnerabilities
Criticality level: Highly critical
Impact: Security Bypass, System access
Where: From remote
Software: Google Chrome 23.x
SECUNIA ADVISORY ID:
http://secunia.com/advisories/51825/
DESCRIPTION:
Multiple vulnerabilities have been reported in Google Chrome,
where
some have an unknown impact and others can be exploited by
malicious
people to bypass certain security restrictions and compromise a
user's system.
1) A buffer overflow vulnerability exists in the bundled
version of
Adobe Flash Player.
For more information:
http://secunia.com/SA51771/
2) A use-after-free error exists when handling SVG layouts.
3) An error when handling URLs can be exploited to bypass the
same
origin policy.
4) A use-after-free error exists when handling certain DOM
objects.
5) An unspecified error exists when handling certain filenames.
6) An integer overflow error exists when handling audio IPC.
7) A use-after-free error exists when seeking video.
8) An integer overflow error exists when handling JavaScript in
PDF
files.
9) An out-of-bounds read error exists when seeking video.
10) An out-of-bounds stack access error exists in v8.
11) An integer overflow error exists in shared memory
allocation.
NOTE: This vulnerability affects Windows only.
12) An unspecified error can be exploited to bypass the sandbox
for
worker processes.
NOTE: This security issue affects Mac only.
13) A use-after-free error exists when handling certain fields
in PDF
files.
14) Some out-of-bounds read errors exist when handling images
in PDF
files.
15) A bad cast error exists in PDF root handling.
16) An unspecified error can be exploited to corrupt database
metadata and access certain files.
17) A use-after-free error exists when printing.
18) An out-of-bounds read error exists when printing.
19) An out-of-bounds read error exists when handling glyph.
20) An unspecified error exists within v8 garbage collection.
21) An unspecified error exists within extension tab handling.
The vulnerabilities are reported in versions prior to
24.0.1312.52.
SOLUTION:
Upgrade to version 24.0.1312.52.
ORIGINAL ADVISORY:
http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.
To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.
The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-
Other related posts:
