Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

Bugtraq ID:	42952
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 02 2010 12:00AM
Updated:	Sep 08 2010 09:02AM
Credit:	Chris Weber of Casaba Security, Brook Novak, Lostmon, Credit to Sergey Glazunov, kuzzcc, VUPEN Vulnerability Research Team, Ashutosh Mehra and Vineet Batra of the Adobe Reader Sandbox Team, Isaac Dawson, Keith Campbell Tavis Ormandy, Michal Zalewski of Goo
Vulnerable:	Google Chrome 5.0.375 .55 Google Chrome 4.1.249 1064 Google Chrome 4.1.249 1059 Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Google Chrome 5.0.396.0 Google Chrome 5.0.395.0 Google Chrome 5.0.394.0 Google Chrome 5.0.393.0 Google Chrome 5.0.392.0 Google Chrome 5.0.391.0 Google Chrome 5.0.390.0 Google Chrome 5.0.387.0 Google Chrome 5.0.386.0 Google Chrome 5.0.385.0 Google Chrome 5.0.384.0 Google Chrome 5.0.383.0 Google Chrome 5.0.382.0 Google Chrome 5.0.381.0 Google Chrome 5.0.380.0 Google Chrome 5.0.379.0 Google Chrome 5.0.378.0 Google Chrome 5.0.376.0
Not Vulnerable:	Google Chrome 6.0.472.53

Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

Google Chrome is prone to multiple vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the browser, cause denial-of-service conditions, carry out spoofing attacks, gain access to sensitive information, and bypass intended security restrictions; other attacks are also possible.

Versions prior to Chrome 6.0.472.53 are vulnerable.

Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/42952.html

Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

References:

• Google Chrome Homepage (Google)
  
• Google Chrome Updates (Google)