Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of service (application crash) via unspecified vectors.

Versions of Google Chrome earlier than 8.0.552.215 are potentially affected by multiple vulnerabilities :

  - It may be possible to bypass the pop-up blocker. (17655)

  - A cross-origin video theft vulnerability exists related to canvas. (55747)  - An unspecified crash exists when handling HTML5 databases. (56237)  - Excessive file dialogs could lead to a browser crash. (58329)  - A use after free error exists in history handling. (59554)  - It may be possible to crash the browser when performing http proxy authentication. (61701)  -  An out-of-bounds read regression exists in the WebM video support. (61653)

  - It  may be possible to crash the browser due to bad indexing with malformed video. (62127)

  - A memory corruption issue exists relating t malicious privileged extension. (62168)

  - A use-after-free error exists in the mouse dragging event handling. (63051)

  - A double free error exists in XPath handling. (63444)

The version of Google Chrome installed on the remote host is earlier than 8.0.552.215.  Such versions are reportedly affected by multiple vulnerabilities :

  - It may be possible to bypass the pop-up blocker.
    (Issue #17655)

  - A cross-origin video theft vulnerability exists related     to canvas. (Issue #55745)

  - An unspecified crash exists when handling HTML5     databases. (Issue #56237)

  - Excessive file dialogs could lead to a browser crash.
    (Issue #58329)

  - A use after free error exists in history handling.
    (Issue #59554)

  - It may be possible to crash the browser when performing     http proxy  authentication. (Issue #61701)

  - An out-of-bounds read regression exists in the WebM     video support. (Issue #61701)

  - It may be possible to crash the browser due to bad     indexing with malformed video. (Issue #62127)

  - A memory corruption issue exists relating to malicious     privileged extension. (Issue #62168)

  - A use-after-free error exists in the handling of SVG     animations. (Issue #62401)

  - A use-after-free error exists in the mouse dragging     event handling. (Issue #63051)

  - A double free error exists in XPath handling.
    (Issue #63444)

ID	Name	Product	Family	Severity
800959	Google Chrome < 8.0.552.215 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5719	Google Chrome < 8.0.552.215 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
50977	Google Chrome < 8.0.552.215 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4484

high

Tenable Plugins

high

medium

high