Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up     blocker via unknown vectors. (CVE-2010-4037)

Note that Nessus relies on the presence of the package as reported by the vendor.

Versions of Google chrome earlier than 7.0.517.41 are potentially affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill / autocomplete. (48225, 51727)

  - An unspecified crash exists relating to forms. (48857)

  - A browser crash exists relating to form autofill. (50428)

  - It is possible to spoof the URl on page unload. (51680)

  - It is possible to bypass the pop-up blocker. (53002)

  - A crash on shutdown exists relating got Web Sockets. (53985)

  - A possible memory corruption exists with animated GIF files. (54500)

  - Stale elements exist in the element map. (56451)

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41.  Such versions are reportedly affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill /     autocomplete.  (Issue #48225, #51727)

  - An unspecified crash exists relating to forms.
    (Issue #48857)

  - A browser crash exists relating to form autofill.
    (Issue #50428)

  - It is possible to spoof the URL on page unload.
    (Issue #51680)

  - It is possible to bypass the pop-up blocker.
    (Issue #53002)

  - A crash on shutdown exists relating to Web Sockets.
    (Issue #53985)

  - A possible memory corruption exists with animated GIF     files. (Issue #54500)

  - Stale elements exists in the element map.
    (Issue #56451)

ID	Name	Product	Family	Severity
217195	Linux Distros Unpatched Vulnerability : CVE-2010-4037	Nessus	Misc.	critical
800924	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
50049	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4037

critical

Tenable Plugins

critical

high

high