Detections
Analytics
Google Chrome < 4.0.249.89 Multiple Vulnerabilities
high Nessus Plugin ID 44587
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 4.0.249.89. Such versions are reportedly affected by multiple vulnerabilities :- Two errors when resolving domain names and when interpreting configured proxy lists can be exploited to disclose sensitive data. (Issue #12303, #22914)
- Multiple integer overflows in the V8 engine.
(Issue #31009)
- An unspecified error when processing the '<ruby>' tag.
(Issue #31692)
- Chrome leaks redirection targets via the '<iframe>' href. (Issue #32309)
- An unspecified error when displaying domain names in HTTP authentication dialogs. (Issue #37218)
- An integer overflow when deserializing sandbox messages.
(Issue #32915)
Solution
Upgrade to Google Chrome 4.0.249.89 or later.See Also
Plugin Details
Severity: High
ID: 44587
File Name: google_chrome_4_0_249_89.nasl
Version: 1.19
Type: local
Agent: windows
Family: Windows
Published: 2/11/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/11/2010
Vulnerability Publication Date: 2/11/2010
Reference Information
CVE: CVE-2010-0315, CVE-2010-0556, CVE-2010-0643, CVE-2010-0644, CVE-2010-0645, CVE-2010-0646, CVE-2010-0647, CVE-2010-0649
BID: 38177