Google Chrome Prior to 22.0.1229.94 Multiple Security Vulnerabilities

Bugtraq ID:	55867
Class:	Unknown
CVE:	CVE-2012-5112 CVE-2012-5376
Remote:	Yes
Local:	No
Published:	Oct 10 2012 12:00AM
Updated:	May 07 2015 05:08PM
Credit:	Pinkie Pie
Vulnerable:	Google Chrome 17.0.963 79 Google Chrome 17.0.963 65 Google Chrome 16.0.912 75 Google Chrome 15.0.874 102 Google Chrome 22.0.1229.92 Google Chrome 22.0.1229.79 Google Chrome 21.0.1180.89 Google Chrome 21.0.1180.83 Google Chrome 21.0.1180.82 Google Chrome 21.0.1180.81 Google Chrome 21.0.1180.79 Google Chrome 21.0.1180.75 Google Chrome 21.0.1180.60 Google Chrome 21.0.1180.50 Google Chrome 21.0.1180.49 Google Chrome 20.0.1132.57 Google Chrome 20.0.1132.43 Google Chrome 20.0.1132.23 Google Chrome 19.0.1084.52 Google Chrome 19.0.1084.21 Google Chrome 19 Google Chrome 18.0.1025.168 Google Chrome 18.0.1025.162 Google Chrome 18.0.1025.151 Google Chrome 18.0.1025.142 Google Chrome 17.0.963.83 Google Chrome 17.0.963.78 Google Chrome 17.0.963.60 Google Chrome 17.0.963.56 Google Chrome 17.0.963.46 Google Chrome 16.0.912.77 Google Chrome 16.0.912.75 Google Chrome 16.0.912.63 Google Chrome 16 Google Chrome 15.0.874.121 Google Chrome 15.0.874.120 Google Chrome 14.0.835.202 Google Chrome 14.0.835.186 Google Chrome 14.0.835.163 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10.0.648.127 Google Chrome 10 Gentoo Linux Apple iTunes 10.6.3 Apple iTunes 10.5.1 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.1 Apple iTunes 11.0.0.163 Apple iTunes 10.7 Apple iTunes 10.6.1.7 Apple iTunes 10.6 Apple iTunes 10.5 Apple iTunes 10.4.0.80 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10 Apple Iphone 4.3.3 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0 Apple iPhone 3.2.2 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:	Google Chrome 22.0.1229.94 Apple Safari 6.0.2 Apple iTunes 11.0.3 Apple iOS 6.0.1

Google Chrome Prior to 22.0.1229.94 Multiple Security Vulnerabilities

Google Chrome is prone to a use-after-free vulnerability and an arbitrary-file-write vulnerability.

Attackers can exploit these issues to execute arbitrary code in the context of the browser, cause denial-of-service conditions, and write to arbitrary local files in context of an unsuspecting user running the affected application; other attacks are also possible.

Versions prior to Chrome 22.0.1229.94 are vulnerable.

Google Chrome Prior to 22.0.1229.94 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Prior to 22.0.1229.94 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.


Apple iTunes 11.0.0.163

• Apple APPLE-SA-2013-05-16-1 iTunes64Setup.exe
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2013-05-16-1 iTunesSetup.exe
  http://www.apple.com/itunes/download/


• Apple iTunes11.0.3.dmg
  http://www.apple.com/itunes/download/

Google Chrome Prior to 22.0.1229.94 Multiple Security Vulnerabilities

References:

• Google Chrome 22.0.1229.94 Stable Channel Update (Google)
  
• Google Chrome Homepage (Google)
  
• About the security content of iOS 6.0.1 Software Update (Apple)