Detections
Analytics
Google Chrome < 5.0.375.127 Multiple Vulnerabilities
high Nessus Plugin ID 48383
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 5.0.375.127. Such versions are reportedly affected by multiple vulnerabilities :- A memory corruption vulnerability exists with the file dialog. (Issue #45400)
- A memory corruption vulnerability exists when processing SVG files. (Issue #49596)
- A vulnerability exists due to a bad cast with text editing. (Issue #49628)
- A vulnerability exists that possibly allows address bar spoofing via a history bug. (Issue #49964)
- A memory corruption vulnerability exists in MIME type handling. (Issue #50515, #51835)
- A vulnerability exists due to a crash on shutdown via a notifications bug. (Issue #50553)
- A vulnerability can be triggered in omnibox autosuggest if the user may be going to type a password.
(Issue #51146)
- A memory corruption vulnerability exists in ruby support. (Issue #51654)
- A memory corruption vulnerability exists in Geolocation support. (Issue #51670)
Solution
Upgrade to Google Chrome 5.0.375.127 or later.See Also
Plugin Details
Severity: High
ID: 48383
File Name: google_chrome_5_0_375_127.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 8/20/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 8/19/2010
Vulnerability Publication Date: 8/19/2010
Reference Information
CVE: CVE-2010-3112, CVE-2010-3113, CVE-2010-3114, CVE-2010-3115, CVE-2010-3116, CVE-2010-3117, CVE-2010-3118, CVE-2010-3119, CVE-2010-3120