Google Chrome prior to 3.0.195.21 Multiple Security Vulnerabilities

Bugtraq ID:	36416
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 15 2009 12:00AM
Updated:	Sep 16 2009 05:11PM
Credit:	Inferno of SecureThoughts.com, Isaac Dawson, Will Dormann of CERT
Vulnerable:	Google Chrome 2.0.172 .43 Google Chrome 2.0.172 .37 Google Chrome 2.0.172 .33 Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Google Chrome 3.0 Beta
Not Vulnerable:	Google Chrome 3.0.195 .21

Google Chrome prior to 3.0.195.21 Multiple Security Vulnerabilities

Google Chrome is prone to multiple vulnerabilities, including an HTML-injection issue and a security-bypass issue.

Attackers can exploit these issues to bypass the same-origin policy and to render arbitrary HTML and script code in the context of affected sites. This may allow attackers to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Note that Chrome 3.0.195.21 also introduces multiple unspecified security improvements for new audio and video codecs.

Versions prior to Chrome 3.0.195.21 are vulnerable.

Google Chrome prior to 3.0.195.21 Multiple Security Vulnerabilities

Attackers can use standard tools to exploit these issues.

Google Chrome prior to 3.0.195.21 Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for details.

Google Chrome prior to 3.0.195.21 Multiple Security Vulnerabilities

References:

• Google Chrome Homepage (Google)
  
• Stable Channel Update (Google)
  
• Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and ("Inferno" )