Google Chrome before 5.0.375.127 does not properly implement the Geolocation feature, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

A large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of Google Chrome earlier than 5.0.375.127 are potentially affected by multiple vulnerabilities :

A memory corruption issue with file dialog. (Bug 45400)

A memory corruption issue with SVGs. (Bug 49596)

An issue relating to a bad cast with text editing. (Bug 49268)

  - A possible address bar spoofing vulnerability caused by a history bug. (Bug 49964)

  - A memory corruption issue in MIME type handling. (Bugs 50515, 51835)

A crash on shutdown due to a notifications bug. (Bug 50553)

Omnibox autosuggest is enabled when a user might be typing a password. (Bug 51146)

A memory corruption issue in Ruby support. (Bug 51654)

A memory corruption issue in Geolocation support. (51670)

The version of Google Chrome installed on the remote host is earlier than 5.0.375.127.  Such versions are reportedly affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists with the file     dialog. (Issue #45400)

  - A memory corruption vulnerability exists when     processing SVG files. (Issue #49596)

  - A vulnerability exists due to a bad cast with text     editing. (Issue #49628)

  - A vulnerability exists that possibly allows address     bar spoofing via a history bug. (Issue #49964)

  - A memory corruption vulnerability exists in MIME type     handling. (Issue #50515, #51835)

  - A vulnerability exists due to a crash on shutdown via a     notifications bug. (Issue #50553)

  - A vulnerability can be triggered in omnibox autosuggest     if the user may be going to type a password.
    (Issue #51146)

  - A memory corruption vulnerability exists in ruby     support. (Issue #51654)

  - A memory corruption vulnerability exists in Geolocation     support. (Issue #51670)

ID	Name	Product	Family	Severity
55967	Ubuntu 10.04 LTS / 10.10 : webkit vulnerabilities (USN-1195-1)	Nessus	Ubuntu Local Security Checks	critical
800956	Google Chrome < 5.0.375.127 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
48383	Google Chrome < 5.0.375.127 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-3120

critical

Tenable Plugins

critical

high

high