Multiple vulnerabilities in Google Chrome

Description

Multiple serious vulnerabilities have been found in Google Chrome 34.0.1847.137 and earlier. Malicious can use these vulnerabilities to cause denial of service, spoof UI or possibly other impact.

Below is a complete list of vulnerabilities

1. use-after-free in StyleElement::removedFromDocument function at core/dom/StyleElement.cpp
2. integer overflow in AudioInputRendererHost::OnCreateStream function at content/browser/renderer_host/media/audio_input_renderer_host.cc
3. use-after-free vulnerability in the SVG implementation at Blink
4. reliance on an insufficiently large integer in InMemoryUrlProtocol::Read function at media/filters/in_memory_url_protocol.cc
5. integer underflow in the LCodeGen::PrepareKeyedOperand function at arm/lithium-codegen-arm.cc
6. Vectors related to ScrollView::paint function can be exploited to spoof UI via extending scrollbar painting.

Original advisories

• Google chrome blog

Related products

• Google-Chrome

CVE list

• CVE-2014-1748
  critical
• CVE-2014-1747
  warning
• CVE-2014-3152
  critical
• CVE-2014-1749
  critical
• CVE-2014-1744
  critical
• CVE-2014-1743
  critical
• CVE-2014-1746
  critical
• CVE-2014-1745
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com