Multiple vulnerabilities in Google Chrome

Description

Multiple serious vulnerabilities have been found in Google Chrome 34.0.1847.137 and earlier. Malicious can use these vulnerabilities to cause denial of service, spoof UI or possibly other impact.

Below is a complete list of vulnerabilities

1. use-after-free in StyleElement::removedFromDocument function at core/dom/StyleElement.cpp
2. integer overflow in AudioInputRendererHost::OnCreateStream function at content/browser/renderer_host/media/audio_input_renderer_host.cc
3. use-after-free vulnerability in the SVG implementation at Blink
4. reliance on an insufficiently large integer in InMemoryUrlProtocol::Read function at media/filters/in_memory_url_protocol.cc
5. integer underflow in the LCodeGen::PrepareKeyedOperand function at arm/lithium-codegen-arm.cc
6. Vectors related to ScrollView::paint function can be exploited to spoof UI via extending scrollbar painting.

Original advisories

• Google chrome blog

Related products

• Google-Chrome

CVE list

• CVE-2014-1748
  warning
• CVE-2014-1747
  warning
• CVE-2014-3152
  high
• CVE-2014-1749
  high
• CVE-2014-1744
  high
• CVE-2014-1743
  high
• CVE-2014-1746
  warning
• CVE-2014-1745
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com