Google Chrome Out Of Bounds CVE-2011-3900 Remote Code Execution Vulnerability

Bugtraq ID:	50701
Class:	Boundary Condition Error
CVE:	CVE-2011-3900
Remote:	Yes
Local:	No
Published:	Nov 17 2011 12:00AM
Updated:	Mar 19 2015 08:46AM
Credit:	Christian Holler
Vulnerable:	Google Chrome 15.0.874 102 Google Chrome 15.0.874.120 Google Chrome 14.0.835.202 Google Chrome 14.0.835.186 Google Chrome 14.0.835.163 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10.0.648.127 Gentoo Linux
Not Vulnerable:	Google Chrome 15.0.874.121

Google Chrome Out Of Bounds CVE-2011-3900 Remote Code Execution Vulnerability

Google Chrome is prone to a remote code-execution vulnerability.

Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Google Chrome versions prior to 15.0.874.121 are affected.

Google Chrome Out Of Bounds CVE-2011-3900 Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Out Of Bounds CVE-2011-3900 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Google Chrome Out Of Bounds CVE-2011-3900 Remote Code Execution Vulnerability

References:

• Google Chrome Homepage (Google)
  
• Stable Channel Update 15.0.874.121 (Google)