Multiple vulnerabilities in Google Chrome

Описание

Multiple serious vulnerabilities have been found in Google Chrome 34.0.1847.137 and earlier. Malicious can use these vulnerabilities to cause denial of service, spoof UI or possibly other impact.

Below is a complete list of vulnerabilities

1. use-after-free in StyleElement::removedFromDocument function at core/dom/StyleElement.cpp
2. integer overflow in AudioInputRendererHost::OnCreateStream function at content/browser/renderer_host/media/audio_input_renderer_host.cc
3. use-after-free vulnerability in the SVG implementation at Blink
4. reliance on an insufficiently large integer in InMemoryUrlProtocol::Read function at media/filters/in_memory_url_protocol.cc
5. integer underflow in the LCodeGen::PrepareKeyedOperand function at arm/lithium-codegen-arm.cc
6. Vectors related to ScrollView::paint function can be exploited to spoof UI via extending scrollbar painting.

Первичный источник обнаружения

• Google chrome blog
  

Связанные продукты

• Google-Chrome

Список CVE

• CVE-2014-1748
  warning
• CVE-2014-1747
  warning
• CVE-2014-3152
  high
• CVE-2014-1749
  high
• CVE-2014-1744
  high
• CVE-2014-1743
  high
• CVE-2014-1746
  warning
• CVE-2014-1745
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com