Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
BID:43228
Info
Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
| Bugtraq ID: | 43228 |
| Class: | Unknown |
| CVE: |
CVE-2010-1823 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 14 2010 12:00AM |
| Updated: | Oct 11 2011 09:40PM |
| Credit: | David Weston of Microsoft + Microsoft Vulnerability Research (MSVR) and wushi of team 509 (independent discoveries). <br>kuzzcc. <br>magnusmorton. <br>Sergey Glazunov and remy.saissy. <br>Google Chrome Security Team (Chris Evans). <br>adriennefelt. |
| Vulnerable: |
Google Chrome 6.0.472 55 Google Chrome 5.0.375 .55 Google Chrome 4.1.249 1064 Google Chrome 4.1.249 1059 Google Chrome 4.1.249 1036 Google Chrome 4.1.249 .1045 Google Chrome 4.1.249 .1042 Google Chrome 4.0.249 .89 Google Chrome 4.0.249 .78 Google Chrome 6.0.472.53 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Google Chrome 5.0.396.0 Google Chrome 5.0.395.0 Google Chrome 5.0.394.0 Google Chrome 5.0.393.0 Google Chrome 5.0.392.0 Google Chrome 5.0.391.0 Google Chrome 5.0.390.0 Google Chrome 5.0.387.0 Google Chrome 5.0.386.0 Google Chrome 5.0.385.0 Google Chrome 5.0.384.0 Google Chrome 5.0.383.0 Google Chrome 5.0.382.0 Google Chrome 5.0.381.0 Google Chrome 5.0.380.0 Google Chrome 5.0.379.0 Google Chrome 5.0.378.0 Google Chrome 5.0.376.0 Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.2 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 |
| Not Vulnerable: |
Google Chrome 6.0.472.59 Apple Safari 5.0.6 Apple Safari 5.0.6 for windows Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple iTunes 10.5 |
Discussion
Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
Google Chrome is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the browser or cause denial-of-service conditions; other attacks are also possible.
Versions prior to Chrome 6.0.472.59 are vulnerable.
Google Chrome is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the browser or cause denial-of-service conditions; other attacks are also possible.
Versions prior to Chrome 6.0.472.59 are vulnerable.
Exploit / POC
Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Apple Safari 5.0.3 for Windows
Apple Safari 5.0
Apple iTunes 10.2
Apple iTunes 10.1
Apple Safari 5.0.2
Apple Safari 5.0 for Windows
Apple iTunes 10.2.2
Apple Safari 5.0.4
Apple iTunes 10
Apple Safari 5.0.3
Apple Safari 5.0.5 for Windows
Apple Safari 5.0.4 for Windows
Apple Safari 5.0.5
Apple Safari 5.0.2 for Windows
Solution:
Updates are available. Please see the references for details.
Apple Safari 5.0.3 for Windows
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple iTunes 10.2
-
Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple iTunes 10.1
-
Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple Safari 5.0.2
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0 for Windows
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple iTunes 10.2.2
-
Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple Safari 5.0.4
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple iTunes 10
-
Apple APPLE-SA-2011-10-11-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2011-10-11-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple Safari 5.0.3
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0.5 for Windows
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0.4 for Windows
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0.5
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
Apple Safari 5.0.2 for Windows
-
Apple Safari for Windows 7, Vista or XP
SafariSetup.exe -
Apple Safari for Mac OS X v10.5.8
Safari5.0.6Leopard.dmg -
Apple Safari for Mac OS X v10.6.8 and later
Safari5.1SnowLeopard.dmg -
Apple Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
Safari_Setup.exe -
Apple Safari+QuickTime for Windows 7, Vista or XP
SafariQuickTimeSetup.exe
References
Google Chrome prior to 6.0.472.59 Multiple Security Vulnerabilities
References:
References:
- Google Chrome Homepage (Google)
- Google Chrome Updates (Google)
- APPLE-SA-2011-10-11-1 iTunes 10.5 (Apple Product Security
) - APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6 (Apple)
- MSVR11-001 Use-After-Free Object Lifetime Vulnerability in Chrome Could Allow Sa (Microsoft)