Detections
Analytics
Google Chrome < 20.0.1132.43 Multiple Vulnerabilities
high Nessus Plugin ID 59735
Language:
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 20.0.1132.43 and is, therefore, affected by the following vulnerabilities :- An error exists related to the loading of the 'metro' DLL. (CVE-2012-2764)
- An error exists related to the leaking of iframe fragment id. (CVE-2012-2815)
- An error exists that allows sandboxes to interfere with each other. (CVE-2012-2816)
- Multiple use-after-free errors exist related to table section handling, counter layout, SVG resource handling, SVG painting, first-letter handling and SVG reference handling. (CVE-2012-2817, CVE-2012-2818, CVE-2012-2823, CVE-2012-2824, CVE-2012-2829, CVE-2012-2831)
- An error exists related to texture handling that can cause application crashes. (CVE-2012-2819)
- Out-of-bounds read errors exist related to SVG filter handling and texture conversion. (CVE-2012-2820, CVE-2012-2826)
- An unspecified error exists related to autofill display actions. (CVE-2012-2821)
- Several 'OOB' read issues exist related to PDF processing. (CVE-2012-2822)
- A read error exists related to XSL handling.
(CVE-2012-2825)
- Several integer overflow issues exist related to PDF processing. (CVE-2012-2828)
- A pointer issue exists related to the setting of array values. (CVE-2012-2830)
- An uninitialized pointer issue exists related to the PDF image codec. (CVE-2012-2832)
- A buffer overflow error exists related to the PDF JavaScript API. (CVE-2012-2833)
- An integer overflow error exists related to the 'Matroska' container. (CVE-2012-2834)
Solution
Upgrade to Google Chrome 20.0.1132.43 or later.See Also
Plugin Details
Severity: High
ID: 59735
File Name: google_chrome_20_0_1132_43.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 6/27/2012
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/26/2012
Vulnerability Publication Date: 6/26/2012
Reference Information
CVE: CVE-2012-2764, CVE-2012-2815, CVE-2012-2816, CVE-2012-2817, CVE-2012-2818, CVE-2012-2819, CVE-2012-2820, CVE-2012-2821, CVE-2012-2822, CVE-2012-2823, CVE-2012-2824, CVE-2012-2825, CVE-2012-2826, CVE-2012-2828, CVE-2012-2829, CVE-2012-2830, CVE-2012-2831, CVE-2012-2832, CVE-2012-2833, CVE-2012-2834