Google Chrome prior to 14.0.835.163 PDF File Handling Memory Corruption Vulnerability

Bugtraq ID:	49933
Class:	Unknown
CVE:	CVE-2011-2841
Remote:	Yes
Local:	No
Published:	Sep 16 2011 12:00AM
Updated:	Mar 19 2015 08:51AM
Credit:	Mario Gomes
Vulnerable:	Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10.0.648.127 Google Chrome 10 Gentoo Linux
Not Vulnerable:	Google Chrome 14.0.835.163

Google Chrome prior to 14.0.835.163 PDF File Handling Memory Corruption Vulnerability

Google Chrome is prone to a memory-corruption vulnerability.

Successful exploits will allow attackers to execute arbitrary code in the context of the browser. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Chrome 14.0.835.163 are vulnerable.

NOTE: This issue was previously covered in BID 49658 (Google Chrome Prior to 14.0.835.163 Multiple Security Vulnerabilities) but has been assigned its own record to better document it.

Google Chrome prior to 14.0.835.163 PDF File Handling Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.