Google Chrome 'metro_driver.dll' DLL Loading Arbitrary Code Execution Vulnerability
BID:54477
Info
Google Chrome 'metro_driver.dll' DLL Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 54477 |
| Class: | Design Error |
| CVE: |
CVE-2012-2764 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 26 2012 12:00AM |
| Updated: | Jun 26 2012 12:00AM |
| Credit: | Moshe Zioni of Comsec Global Consulting |
| Vulnerable: |
Google Chrome 20.0.1132.23 Google Chrome 19.0.1084.52 Google Chrome 19.0.1084.21 |
| Not Vulnerable: |
Google Chrome 20.0.1132.43 |
Solution / Fix
Google Chrome 'metro_driver.dll' DLL Loading Arbitrary Code Execution Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Google Chrome 'metro_driver.dll' DLL Loading Arbitrary Code Execution Vulnerability
References:
References:
- Application DLL Load Hijacking (HD Moore)
- Chrome 20 Stable Channel Update (Google)
- Exploiting DLL Hijacking Flaws (hdm)
- Google Chrome Homepage (Google)
- Microsoft Security Advisory 2269637 Released (Microsoft)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Google Chrome 19 metro_driver.dll mishandling (Moshe Zioni of Comsec Global Consulting)
- Microsoft Security Advisory (2269637) (Microsoft)