Detections
Analytics
Google Chrome < 7.0.517.44 Multiple Vulnerabilities
high Nessus Plugin ID 50476
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 7.0.517.44. Such versions are reportedly affected by multiple vulnerabilities :- A use-after-free error exists in text editing.
(Issue #51602)
- A memory corruption error exists relating to enormous text area. (Issue #55257)
- A bad cast exists with the SVG use element.
(Issue #58657)
- An invalid memory read exists in XPath handling.
(Issue #58731)
- A use-after-free error exists in text control selections. (Issue #58741)
- A memory corruption issue exists in libvpx.
(Issue #60055)
- A bad use of a destroyed frame object exists.
(Issue #60238)
- Multiple type confusions exists with event objects.
(Issue #60327, #60769, #61255)
- An out-of-bounds array access exists in SVG handling.
(Issue #60688)
Solution
Upgrade to Google Chrome 7.0.517.44 or later.See Also
Plugin Details
Severity: High
ID: 50476
File Name: google_chrome_7_0_517_44.nasl
Version: 1.22
Type: local
Agent: windows
Family: Windows
Published: 11/4/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 11/4/2010
Vulnerability Publication Date: 11/4/2010
Reference Information
CVE: CVE-2010-4008, CVE-2010-4197, CVE-2010-4198, CVE-2010-4203, CVE-2010-4204, CVE-2010-4206
BID: 44646, 44771, 44779, 45718, 45719, 45720, 45721
SECUNIA: 42109