Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.

Versions of Google chrome earlier than 7.0.517.41 are potentially affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill / autocomplete. (48225, 51727)

  - An unspecified crash exists relating to forms. (48857)

  - A browser crash exists relating to form autofill. (50428)

  - It is possible to spoof the URl on page unload. (51680)

  - It is possible to bypass the pop-up blocker. (53002)

  - A crash on shutdown exists relating got Web Sockets. (53985)

  - A possible memory corruption exists with animated GIF files. (54500)

  - Stale elements exist in the element map. (56451)

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41.  Such versions are reportedly affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill /     autocomplete.  (Issue #48225, #51727)

  - An unspecified crash exists relating to forms.
    (Issue #48857)

  - A browser crash exists relating to form autofill.
    (Issue #50428)

  - It is possible to spoof the URL on page unload.
    (Issue #51680)

  - It is possible to bypass the pop-up blocker.
    (Issue #53002)

  - A crash on shutdown exists relating to Web Sockets.
    (Issue #53985)

  - A possible memory corruption exists with animated GIF     files. (Issue #54500)

  - Stale elements exists in the element map.
    (Issue #56451)

ID	Name	Product	Family	Severity
800924	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5680	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
50049	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4033

high

Tenable Plugins

high

medium

high