Google Chrome OS 'flimflam' Use-After-Free Denial of Service Vulnerability

Bugtraq ID:	46484
Class:	Unknown
CVE:	CVE-2011-1042
Remote:	Yes
Local:	No
Published:	Jan 27 2011 12:00AM
Updated:	Mar 19 2015 08:13AM
Credit:	srikanthk
Vulnerable:	Google Chrome OS 0 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.308 Google Chrome 8.0.552.307 Google Chrome 8.0.552.306 Google Chrome 8.0.552.305 Google Chrome 8.0.552.304 Google Chrome 8.0.552.303 Google Chrome 8.0.552.302 Google Chrome 8.0.552.301 Google Chrome 8.0.552.300 Google Chrome 8.0.552.237 Google Chrome 8.0.552.226 Google Chrome 8.0.552.225 Google Chrome 8.0.552.224 Google Chrome 8.0.552.223 Google Chrome 8.0.552.222 Google Chrome 8.0.552.221 Google Chrome 8.0.552.220 Google Chrome 8.0.552.219 Google Chrome 8.0.552.218 Google Chrome 8.0.552.217 Google Chrome 8.0.552.216 Google Chrome 8.0.552.215 Google Chrome 8.0.552.214 Google Chrome 8.0.552.213 Google Chrome 8.0.552.212 Google Chrome 8.0.552.211 Google Chrome 8.0.552.210 Google Chrome 8.0.552.21 Google Chrome 8.0.552.209 Google Chrome 8.0.552.208 Google Chrome 8.0.552.207 Google Chrome 8.0.552.206 Google Chrome 8.0.552.205 Google Chrome 8.0.552.204 Google Chrome 8.0.552.203 Google Chrome 8.0.552.202 Google Chrome 8.0.552.201 Google Chrome 8.0.552.200 Google Chrome 8.0.552.20 Google Chrome 8.0.552.2 Google Chrome 8.0.552.19 Google Chrome 8.0.552.18 Google Chrome 8.0.552.17 Google Chrome 8.0.552.16 Google Chrome 8.0.552.15 Google Chrome 8.0.552.14 Google Chrome 8.0.552.13 Google Chrome 8.0.552.12 Google Chrome 8.0.552.11 Google Chrome 8.0.552.105 Google Chrome 8.0.552.104 Google Chrome 8.0.552.103 Google Chrome 8.0.552.102 Google Chrome 8.0.552.101 Google Chrome 8.0.552.100 Google Chrome 8.0.552.10 Google Chrome 8.0.552.1 Google Chrome 8.0.552.0 Google Chrome 8.0.551.1 Google Chrome 8.0.551.0 Google Chrome 8.0.550.0 Google Chrome 8.0.549.0
Not Vulnerable:	Google Chrome OS 21.0.1180.49 Google Chrome 8.0.552.344

Google Chrome OS 'flimflam' Use-After-Free Denial of Service Vulnerability

Google Chrome OS is prone to a denial-of-service vulnerability due to a use-after-free error.

Successful exploits will cause the affected application to crash, effectively denying service to legitimate users. Due to the nature of this issue, remote code execution may be possible; this has not been confirmed.

Versions prior to Google Chrome OS 0.9.130.14 Beta are vulnerable.

Google Chrome OS 'flimflam' Use-After-Free Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Google Chrome OS 'flimflam' Use-After-Free Denial of Service Vulnerability

References:

• Chrome OS (Google)
  
• Chrome OS Beta Channel Update (Chrome OS Team)
  
• Chromium Code Reviews (Chrome OS Team)
  
• Issue 8871: Crash :flimflamd!__connman_device_get_ident [device.c : 1275 + 0xd] ([email protected])