Google Chrome Multiple Vulnerabilities

SA48992

CVE-2011-3078, CVE-2011-3079, CVE-2011-3080, CVE-2011-3081, CVE-2012-1521

01 May 2012

18 Jun 2012

Highly Critical

Vendor Patch

Google Chrome 18.x

From remote

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Unknown

Covers various weaknesses, security issues, and vulnerabilities not covered by the other impact types, or where the impact isn't known due to insufficient information from vendors and researchers.

Multiple vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to compromise a user's system.

1) A use-after-free error exists in floats handling.

2) A use-after-free error exists within the xml parser.

3) An error exists within the IPC validation.

4) A race condition exists within the sandbox IPC.

5) A second use-after-free error exists in floats handling.

The vulnerabilities are reported in versions prior to 18.0.1025.168.

Update to version 18.0.1025.168.

The vendor credits:
1) Marty Barbella, Google Chrome Security Team and miaubiz
2) SkyLined, Google Chrome Security Team and wushi, team509 via iDefense
3) PinkiePie
4) Willem Pinckaers, Matasano.
5) miaubiz

Google:
http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html

iDefense:
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=978