Detections
Analytics
Google Chrome < 17.0.963.56 Multiple Vulnerabilities
high Nessus Plugin ID 57974
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 17.0.963.56 and is, therefore, affected by the following vulnerabilities:- Integer overflow errors exist related to PDF codecs and libpng. (CVE-2011-3015, CVE-2011-3026)
- A read-after-free error exists related to 'counter nodes'. (CVE-2011-3016)
- Use-after-free errors exist related to database handling, subframe loading, and drag-and-drop functionality. (CVE-2011-3017, CVE-2011-3021, CVE-2011-3023)
- Heap-overflow errors exist related to path rendering and 'MKV' handling. (CVE-2011-3018, CVE-2011-3019)
- Unspecified errors exist related to the native client validator and HTTP use with translation scripts.
(CVE-2011-3020, CVE-2011-3022)
- Empty x509 certificates can cause browser crashes.
(CVE-2011-3024)
- An out-of-bounds read error exists related to h.264 parsing. (CVE-2011-3025)
- A bad variable cast exists related to column handling.
(CVE-2011-3027)
Solution
Upgrade to Google Chrome 17.0.963.56 or later.See Also
Plugin Details
Severity: High
ID: 57974
File Name: google_chrome_17_0_963_56.nasl
Version: 1.10
Type: local
Agent: windows
Family: Windows
Published: 2/16/2012
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 2/15/2012
Vulnerability Publication Date: 2/15/2012
Reference Information
CVE: CVE-2011-3015, CVE-2011-3016, CVE-2011-3017, CVE-2011-3018, CVE-2011-3019, CVE-2011-3020, CVE-2011-3021, CVE-2011-3022, CVE-2011-3023, CVE-2011-3024, CVE-2011-3025, CVE-2011-3026, CVE-2011-3027