Multiple vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to conduct spoofing attacks, disclose potentially sensitive information, and compromise a user's system.

1) An error within regex matching can be exploited to cause an out-of-bounds read.

2) An error in libxml can be exploited to cause an out-of-bounds read.

3) An error in the PDF parser can be exploited to cause an out-of-bounds read.

4) An error in the view-source functionality can be exploited to spoof a URL bar.

5) An error within SVG parsing can be exploited to cause an out-of-bounds read.

6) An error when handling a CSS property array can be exploited to corrupt memory.

NOTE: This vulnerability affects the 64-bit platforms only.

7) An error when handling YUV video frames can be exploited to cause an out-of-bounds read.

8) An error within PDF handling can be exploited to cause an out-of-bounds read.

9) A use-after-free error exists in SVG filters.

10) A use-after-free error exists within Range handling.

11) An error within v8 i18n handling can be exploited to cause an out-of-bounds write.

12) An error when handling certain PDF fonts can be exploited to cause a buffer overflow.

13) An error when handling PDF cross references can be exploited to cause an out-of-bounds read.

14) An error in FileWatcher can be exploited to cause a stack-based buffer overflow.

15) A use-after-free error exists within bidi handling.

Successful exploitation of vulnerabilities #6, #9 - #12, #14, and #15 may allow execution of arbitrary code.

Solution
Upgrade to version 16.0.912.63.

Provided and/or discovered by
4) Luka Treiber, ACROS Security

The vendor credits:
1) David Holloway, Chromium development community
2, 15) Inferno, Google Chrome Security Team
3, 5) Aki Helin, OUSPG
6, 8) scarybeasts, Google Chrome Security Team
6) Chu
7) Cris Neckar, Google Chrome Security Team
8) Robert Swiecki, Google Security Team.
9, 10) Arthur Gerkis.
11) Slawomir Blazek
12, 13) Atte Kettunen, OUSPG
14) Marty Barbella, Google Chrome Security Team
15) miaubiz.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Google:
http://googlechromereleases.blogspot.com/2011/12/stable-channel-update.html

ACROS Security:
http://blog.acrossecurity.com/2012/01/google-chrome-https-address-bar.html

Deep Links
Links available to Secunia VIM customers