Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting."

The remote host is affected by the vulnerability described in GLSA-201403-01 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition. Furthermore, a remote attacker       may be able to bypass security restrictions or have other unspecified       impact.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote host is a version prior to 32.0.1700.102.  It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exists related to processing     SVG images. (CVE-2013-6649)

  - An unspecified error exists related to the V8 JavaScript     engine could allow memory corruption. (CVE-2013-6650)

  - An unspecified security issue exists. (CVE-2014-1681)

The remote host has Google Chrome browser installed. Versions of Google Chrome prior to 32.0.1700.102 are affected by the following vulnerabilities:

  - A use-after-free error exists related to processing SVG images. (CVE-2013-6649)

 - An unspecified error exists related to the V8 JavaScript engine could allow memory corruption. (CVE-2013-6650)

 - An unspecified security issue exists. (CVE-2014-1681)

ID	Name	Product	Family	Severity
72851	GLSA-201403-01 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
72167	Google Chrome < 32.0.1700.102 Multiple Vulnerabilities	Nessus	Windows	critical
801616	Google Chrome < 32.0.1700.102 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2014-1681

critical

Tenable Plugins

critical

critical

high