English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Google Chrome Multiple Vulnerabilities


Secunia ID

SA49906

CVE-ID

CVE-2012-2842, CVE-2012-2843, CVE-2012-2844

Release Date

12 Jul 2012

Criticality

Highly Critical

Solution Status

Vendor Patch

Software

Google Chrome 20.x

Where

From remote

Impact
System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Description

Multiple vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to compromise a user's system.

1) A use-after-free error exists within counter handling.

2) A use-after-free error exists within layout height tracking.

3) An unspecified error when handling JavaScript within PDFs can be exploited to access certain objects.

Solution

Update to version 20.0.1132.57.

Reported by

The vendor credits:
1, 2) miaubiz
3) Alexey Samsonov

Original Advisory

Google:
http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html