Detections
Analytics
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
high Nessus Plugin ID 44317
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 4.0.249.78. Such versions are reportedly affected by multiple vulnerabilities :- A pop-up blocker bypass. (Issue #3275)
- Cross-domain theft due to CSS design error.
(Issue #9877)
- Browser memory error with stale pop-up block menu.
(Issue #12523)
- An unspecified error allows XMLHttpRequests to directories. (Issue #20450)
- An unspecified error exists related to escaping characters in shortcuts. (Issue #23693)
- Renderer memory errors exist when drawing on canvases.
(Issue #8864, #24701, #24646)
- An image decoding memory error. (Issue #28566)
- An unspecified error exists that could result in failure to strip 'Referer'. (Issue #29920)
- An unspecified cross-domain access error. (Issue #30666)
- An unspecified bitmap deserialization error.
(Issue #31307)
- An unspecified browser crash related to nested URLs.
(Issue #31517)
Solution
Upgrade to Google Chrome 4.0.249.78 or later.See Also
https://secuniaresearch.flexerasoftware.com/secunia_research/2009-65/
Plugin Details
Severity: High
ID: 44317
File Name: google_chrome_4_0_249_78.nasl
Version: 1.17
Type: local
Agent: windows
Family: Windows
Published: 1/26/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/26/2010
Vulnerability Publication Date: 1/26/2010
Reference Information
CVE: CVE-2010-0650, CVE-2010-0651, CVE-2010-0655, CVE-2010-0656, CVE-2010-0657, CVE-2010-0658, CVE-2010-0659, CVE-2010-0660, CVE-2010-0661, CVE-2010-0662, CVE-2010-0663, CVE-2010-0664