Detections
Analytics
Google Chrome < 1.0.154.46 Multiple Vulnerabilities
medium Log Correlation Engine Plugin ID 800951
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 1.0.154.46. Such versions are reportedly affected by several issues :- Cross-site scripting vulnerabilities in the Adobe Reader Plugin itself could be leveraged using a PDF document to run scripts on arbitrary sites via Google Chrome. (CVE-2007-0048 and CVE-2007-0045)
- A cross-domain security bypass vulnerability that could allow an attacker to bypass the same-origin policy and gain access to potentially sensitive information. (CVE-2009-0276)
Solution
Upgrade to version 1.0.154.46 or higher.See Also
Plugin Details
Severity: Medium
ID: 800951
Family: Web Clients
Nessus ID: 35558
Reference Information
CVE: CVE-2007-0044, CVE-2007-0045, CVE-2007-0048, CVE-2009-0276, CVE-2009-0411, CVE-2009-0467, CVE-2009-0468