Retired: Google Chrome prior to 4.1.249.1064 Multiple Security Vulnerabilities

Bugtraq ID:	39750
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2010 12:00AM
Updated:	Apr 29 2010 10:13PM
Credit:	Jordi Chancel, David Bloom of Google Security Team, wushi of team509
Vulnerable:	Google Chrome 4.1.249 1059 Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78
Not Vulnerable:	Google Chrome 4.1.249 1064

Retired: Google Chrome prior to 4.1.249.1064 Multiple Security Vulnerabilities

Google Chrome is prone to multiple vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the browser, cause denial-of-service conditions, and carry out cross-domain scripting attacks; other attacks are also possible.

Versions prior to Chrome 4.1.249.1064 are vulnerable.

NOTE: This BID is being retired; the following individual records have been created to document these vulnerabilities:

39804 Google Chrome HTML5 Media Handling Memory Corruption Vulnerability
39808 Google Chrome Font Handling Memory Corruption Vulnerability
39813 Google Chrome Google URL Cross Domain Security Bypass

Retired: Google Chrome prior to 4.1.249.1064 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Retired: Google Chrome prior to 4.1.249.1064 Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for details.

Retired: Google Chrome prior to 4.1.249.1064 Multiple Security Vulnerabilities

References:

• Google Chrome 4.1.249.1064 has been released to the Stable channel on Windows (Google)
  
• Google Chrome Homepage (Google)