Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
BID:50360
Info
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
| Bugtraq ID: | 50360 |
| Class: | Unknown |
| CVE: |
CVE-2011-2845 CVE-2011-3875 CVE-2011-3876 CVE-2011-3877 CVE-2011-3878 CVE-2011-3879 CVE-2011-3880 CVE-2011-3881 CVE-2011-3882 CVE-2011-3883 CVE-2011-3884 CVE-2011-3885 CVE-2011-3886 CVE-2011-3887 CVE-2011-3888 CVE-2011-3889 CVE-2011-3890 CVE-2011-3891 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 25 2011 12:00AM |
| Updated: | Sep 20 2012 12:00AM |
| Credit: | Jordi Chancel, Marc Novak, Juho Nurminen, Tom Sepez(Google Chrome Security Team), miaubiz, Masato Kinugawa, Vladimir Vorontsov(ONsec company), Sergey Glazunov, Inferno(Google Chrome Security Team), Brian Ryner(Chromium development community), Christian Hol |
| Vulnerable: |
SRWare Iron 9.0.600.1 SRWare Iron 8.0.555.1 SRWare Iron 8.0.555.0 SRWare Iron 15 SRWare Iron 13.0.800.0 SRWare Iron 13.0 SRWare Iron 11.0.700.3 SRWare Iron 11.0.700.2 SRWare Iron 11.0.700.1 SRWare Iron 11.0.700.0 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.308 Google Chrome 8.0.552.307 Google Chrome 8.0.552.306 Google Chrome 8.0.552.305 Google Chrome 8.0.552.304 Google Chrome 8.0.552.303 Google Chrome 8.0.552.302 Google Chrome 8.0.552.301 Google Chrome 8.0.552.300 Google Chrome 8.0.552.237 Google Chrome 8.0.552.226 Google Chrome 8.0.552.225 Google Chrome 8.0.552.224 Google Chrome 8.0.552.223 Google Chrome 8.0.552.222 Google Chrome 8.0.552.221 Google Chrome 8.0.552.220 Google Chrome 8.0.552.219 Google Chrome 8.0.552.218 Google Chrome 8.0.552.217 Google Chrome 8.0.552.216 Google Chrome 8.0.552.215 Google Chrome 8.0.552.215 Google Chrome 8.0.552.214 Google Chrome 8.0.552.213 Google Chrome 8.0.552.212 Google Chrome 8.0.552.211 Google Chrome 8.0.552.210 Google Chrome 8.0.552.21 Google Chrome 8.0.552.209 Google Chrome 8.0.552.208 Google Chrome 8.0.552.207 Google Chrome 8.0.552.206 Google Chrome 8.0.552.205 Google Chrome 8.0.552.204 Google Chrome 8.0.552.203 Google Chrome 8.0.552.202 Google Chrome 8.0.552.201 Google Chrome 8.0.552.200 Google Chrome 8.0.552.20 Google Chrome 8.0.552.2 Google Chrome 8.0.552.19 Google Chrome 8.0.552.18 Google Chrome 8.0.552.17 Google Chrome 8.0.552.16 Google Chrome 8.0.552.15 Google Chrome 8.0.552.14 Google Chrome 8.0.552.13 Google Chrome 8.0.552.12 Google Chrome 8.0.552.11 Google Chrome 8.0.552.105 Google Chrome 8.0.552.104 Google Chrome 8.0.552.103 Google Chrome 8.0.552.102 Google Chrome 8.0.552.101 Google Chrome 8.0.552.100 Google Chrome 8.0.552.10 Google Chrome 8.0.552.1 Google Chrome 8.0.552.0 Google Chrome 8.0.551.1 Google Chrome 8.0.551.0 Google Chrome 8.0.550.0 Google Chrome 8.0.549.0 Google Chrome 7.0.548.0 Google Chrome 7.0.547.1 Google Chrome 7.0.547.0 Google Chrome 7.0.544.0 Google Chrome 7.0.542.0 Google Chrome 7.0.541.0 Google Chrome 7.0.540.0 Google Chrome 7.0.539.0 Google Chrome 7.0.538.0 Google Chrome 7.0.537.0 Google Chrome 7.0.536.4 Google Chrome 7.0.536.3 Google Chrome 7.0.536.2 Google Chrome 7.0.536.1 Google Chrome 7.0.536.0 Google Chrome 7.0.535.2 Google Chrome 7.0.535.1 Google Chrome 7.0.531.2 Google Chrome 7.0.531.1 Google Chrome 7.0.531.0 Google Chrome 7.0.530.0 Google Chrome 7.0.529.2 Google Chrome 7.0.529.1 Google Chrome 7.0.529.0 Google Chrome 7.0.528.0 Google Chrome 7.0.526.0 Google Chrome 7.0.525.0 Google Chrome 7.0.524.0 Google Chrome 7.0.522.0 Google Chrome 7.0.521.0 Google Chrome 7.0.520.0 Google Chrome 7.0.519.0 Google Chrome 7.0.518.0 Google Chrome 7.0.517.9 Google Chrome 7.0.517.8 Google Chrome 7.0.517.7 Google Chrome 7.0.517.6 Google Chrome 7.0.517.5 Google Chrome 7.0.517.44 Google Chrome 7.0.517.43 Google Chrome 7.0.517.42 Google Chrome 7.0.517.41 Google Chrome 7.0.517.41 Google Chrome 7.0.517.40 Google Chrome 7.0.517.4 Google Chrome 7.0.517.39 Google Chrome 7.0.517.38 Google Chrome 7.0.517.37 Google Chrome 7.0.517.36 Google Chrome 7.0.517.35 Google Chrome 7.0.517.34 Google Chrome 7.0.517.33 Google Chrome 7.0.517.32 Google Chrome 7.0.517.31 Google Chrome 7.0.517.30 Google Chrome 7.0.517.29 Google Chrome 7.0.517.28 Google Chrome 7.0.517.27 Google Chrome 7.0.517.26 Google Chrome 7.0.517.25 Google Chrome 7.0.517.24 Google Chrome 7.0.517.23 Google Chrome 7.0.517.22 Google Chrome 7.0.517.21 Google Chrome 7.0.517.20 Google Chrome 7.0.517.2 Google Chrome 7.0.517.19 Google Chrome 7.0.517.18 Google Chrome 7.0.517.17 Google Chrome 7.0.517.16 Google Chrome 7.0.517.14 Google Chrome 7.0.517.13 Google Chrome 7.0.517.12 Google Chrome 7.0.517.11 Google Chrome 7.0.517.10 Google Chrome 7.0.517.0 Google Chrome 7.0.516.0 Google Chrome 7.0.515.0 Google Chrome 7.0.514.1 Google Chrome 7.0.514.0 Google Chrome 7.0.513.0 Google Chrome 7.0.512.0 Google Chrome 7.0.511.4 Google Chrome 7.0.511.2 Google Chrome 7.0.511.1 Google Chrome 7.0.510.0 Google Chrome 7.0.509.0 Google Chrome 7.0.507.3 Google Chrome 7.0.507.2 Google Chrome 7.0.507.1 Google Chrome 7.0.507.0 Google Chrome 7.0.506.0 Google Chrome 7.0.505.0 Google Chrome 7.0.504.0 Google Chrome 7.0.503.1 Google Chrome 7.0.503.0 Google Chrome 7.0.500.1 Google Chrome 7.0.500.0 Google Chrome 7.0.499.1 Google Chrome 7.0.499.0 Google Chrome 7.0.498.0 Google Chrome 7.0.497.0 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10 Gentoo Linux Apple Safari 5.0.6 Apple Safari 4.1.2 for Windows Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 5.1.1 for Windows Apple Safari 5.1.1 Apple Safari 5.1 for Windows Apple Safari 5.1 Apple Safari 5.0.6 for windows Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1.3 for Windows Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4.0 Beta Apple Safari 4.0 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple iTunes 10.5.1 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.2 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iTunes 10.5 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10 Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: |
SRWare Iron 15.0.900.1 Google Chrome 15.0.874 102 Apple Safari 5.1.4 for Windows Apple Safari 5.1.4 Apple iTunes 10.6 Apple iOS 5.1 |
Discussion
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
Google Chrome is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code, steal cookie-based authentication credentials, bypass the cross-origin restrictions, perform spoofing attacks, and disclose potentially sensitive information, other attacks may also be possible.
Versions prior to Chrome 15.0.874.102 are vulnerable.
Google Chrome is prone to multiple vulnerabilities.
Attackers can exploit these issues to execute arbitrary code, steal cookie-based authentication credentials, bypass the cross-origin restrictions, perform spoofing attacks, and disclose potentially sensitive information, other attacks may also be possible.
Versions prior to Chrome 15.0.874.102 are vulnerable.
Exploit / POC
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Solution / Fix
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Apple iTunes 10.5
Apple Safari 5.1
Solution:
Updates are available. Please see the references for more information.
Apple iTunes 10.5
-
Apple APPLE-SA-2012-03-07-1-iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2012-03-07-1-iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/
Apple Safari 5.1
-
Apple Safari5.1.4LionManual.dmg
Safari for OS X Lion v10.7.3
http://www.apple.com/safari/download/ -
Apple Safari5.1.4SnowLeopardManual.dmg
Safari for Mac OS X v10.6.8
http://www.apple.com/safari/download/
References
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
References:
References:
- Chrome Stable Release 15.0.874.102 (Google)
- Google Chrome Homepage (Google)
- New Iron-Version: 15.0.900.2 Stable for Windows (SRIron)