Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Versions of Google chrome earlier than 7.0.517.41 are potentially affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill / autocomplete. (48225, 51727)

  - An unspecified crash exists relating to forms. (48857)

  - A browser crash exists relating to form autofill. (50428)

  - It is possible to spoof the URl on page unload. (51680)

  - It is possible to bypass the pop-up blocker. (53002)

  - A crash on shutdown exists relating got Web Sockets. (53985)

  - A possible memory corruption exists with animated GIF files. (54500)

  - Stale elements exist in the element map. (56451)

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41.  Such versions are reportedly affected by multiple vulnerabilities :

  - It is possible to spam profiles via autofill /     autocomplete.  (Issue #48225, #51727)

  - An unspecified crash exists relating to forms.
    (Issue #48857)

  - A browser crash exists relating to form autofill.
    (Issue #50428)

  - It is possible to spoof the URL on page unload.
    (Issue #51680)

  - It is possible to bypass the pop-up blocker.
    (Issue #53002)

  - A crash on shutdown exists relating to Web Sockets.
    (Issue #53985)

  - A possible memory corruption exists with animated GIF     files. (Issue #54500)

  - Stale elements exists in the element map.
    (Issue #56451)

ID	Name	Product	Family	Severity
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
800924	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
50049	Google Chrome < 7.0.517.41 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4037

critical

Tenable Plugins

critical

high

high