Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Versions of Google Chrome earlier than 5.0.375.127 are potentially affected by multiple vulnerabilities :

A memory corruption issue with file dialog. (Bug 45400)

A memory corruption issue with SVGs. (Bug 49596)

An issue relating to a bad cast with text editing. (Bug 49268)

  - A possible address bar spoofing vulnerability caused by a history bug. (Bug 49964)

  - A memory corruption issue in MIME type handling. (Bugs 50515, 51835)

A crash on shutdown due to a notifications bug. (Bug 50553)

Omnibox autosuggest is enabled when a user might be typing a password. (Bug 51146)

A memory corruption issue in Ruby support. (Bug 51654)

A memory corruption issue in Geolocation support. (51670)

The version of Google Chrome installed on the remote host is earlier than 5.0.375.127.  Such versions are reportedly affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists with the file     dialog. (Issue #45400)

  - A memory corruption vulnerability exists when     processing SVG files. (Issue #49596)

  - A vulnerability exists due to a bad cast with text     editing. (Issue #49628)

  - A vulnerability exists that possibly allows address     bar spoofing via a history bug. (Issue #49964)

  - A memory corruption vulnerability exists in MIME type     handling. (Issue #50515, #51835)

  - A vulnerability exists due to a crash on shutdown via a     notifications bug. (Issue #50553)

  - A vulnerability can be triggered in omnibox autosuggest     if the user may be going to type a password.
    (Issue #51146)

  - A memory corruption vulnerability exists in ruby     support. (Issue #51654)

  - A memory corruption vulnerability exists in Geolocation     support. (Issue #51670)

ID	Name	Product	Family	Severity
800956	Google Chrome < 5.0.375.127 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5644	Google Chrome < 5.0.375.127 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
48383	Google Chrome < 5.0.375.127 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-3112

high

Tenable Plugins

high

medium

high