Google Chrome Privilege Escalation Weakness

Bugtraq ID:	35723
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2009 12:00AM
Updated:	Jul 17 2009 04:06PM
Credit:	Google Chrome security team
Vulnerable:	Google Chrome 2.0.172 .33 Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Google Chrome 1.0.154 .61 Google Chrome 0.3.154 9 Google Chrome 0.2.149 .30 Google Chrome 0.2.149 .29 Google Chrome 0.2.149 .27 Google Chrome 1.0.154.65 Google Chrome 1.0.154.64 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.36
Not Vulnerable:	Google Chrome 2.0.172 .37

Google Chrome Privilege Escalation Weakness

Google Chrome is prone to a weakness that may allow attackers to escalate privileges after carrying out a successful code-execution attack against a renderer (tab) process.

This issue affects versions prior to Chrome 2.0.172.37.

Google Chrome Privilege Escalation Weakness

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Privilege Escalation Weakness

Solution:
Vendor updates are available. Please see the references for details.

Google Chrome Privilege Escalation Weakness

References:

• Chrome Home Page (Techland)
  
• Stable, Beta update: Bug fixes (Google)