Multiple vulnerabilities in Google Chrome

Описание

Multiple serious vulnerabilities have been found in Google Chrome 34.0.1847.137 and earlier. Malicious can use these vulnerabilities to cause denial of service, spoof UI or possibly other impact.

Below is a complete list of vulnerabilities

1. use-after-free in StyleElement::removedFromDocument function at core/dom/StyleElement.cpp
2. integer overflow in AudioInputRendererHost::OnCreateStream function at content/browser/renderer_host/media/audio_input_renderer_host.cc
3. use-after-free vulnerability in the SVG implementation at Blink
4. reliance on an insufficiently large integer in InMemoryUrlProtocol::Read function at media/filters/in_memory_url_protocol.cc
5. integer underflow in the LCodeGen::PrepareKeyedOperand function at arm/lithium-codegen-arm.cc
6. Vectors related to ScrollView::paint function can be exploited to spoof UI via extending scrollbar painting.

Первичный источник обнаружения

• Google chrome blog
  

Связанные продукты

• Google-Chrome

Список CVE

• CVE-2014-1748
  critical
• CVE-2014-1747
  warning
• CVE-2014-3152
  critical
• CVE-2014-1749
  critical
• CVE-2014-1744
  critical
• CVE-2014-1743
  critical
• CVE-2014-1746
  critical
• CVE-2014-1745
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com