The remote host is affected by the vulnerability described in GLSA-201309-16 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition. Furthermore, a remote attacker       may be able to bypass security restrictions or have other, unspecified,       impact.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote host is earlier than 23.0.1271.97 and is, therefore, affected by the following vulnerabilities :

  - Use-after-free errors exist related to visibility events     and the URL loader. (CVE-2012-5139, CVE-2012-5140)

  - An unspecified error exists related to instantiation     of the 'Chromoting' client plugin. (CVE-2012-5141)

  - An unspecified error exists related to history     navigation that can lead to application crashes.
    (CVE-2012-5142)

  - An integer overflow error exists related to the 'PPAPI'     image buffers. (CVE-2012-5143)

  - A stack corruption error exists related to 'AAC'     decoding. (CVE-2012-5144)

  - The bundled version of Adobe Flash Player contains     flaws that can lead to arbitrary code execution.
    (CVE-2012-5676, CVE-2012-5677, CVE-2012-5678)

Successful exploitation of some of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user's privileges.

Google Chrome Releases reports :

[158204] High CVE-2012-5139: Use-after-free with visibility events.
Credit to Chamal de Silva.

[159429] High CVE-2012-5140: Use-after-free in URL loader. Credit to Chamal de Silva.

[160456] Medium CVE-2012-5141: Limit Chromoting client plug-in instantiation. Credit to Google Chrome Security Team (Juri Aedla).

[160803] Critical CVE-2012-5142: Crash in history navigation. Credit to Michal Zalewski of Google Security Team.

[160926] Medium CVE-2012-5143: Integer overflow in PPAPI image buffers. Credit to Google Chrome Security Team (Cris Neckar).

[161639] High CVE-2012-5144: Stack corruption in AAC decoding. Credit to pawlkt.

- Update to 25.0.1362

  - Security fixes (bnc#794075) :

  - CVE-2012-5139: Use-after-free with visibility events

  - CVE-2012-5140: Use-after-free in URL loader

  - CVE-2012-5141: Limit Chromoting client plug-in     instantiation.

  - CVE-2012-5142: Crash in history navigation.

  - CVE-2012-5143: Integer overflow in PPAPI image buffers

  - CVE-2012-5144: Stack corruption in AAC decoding

  - Fixed garbled header and footer text in print preview.
    [Issue: 152893]

  - Fixed extension action badges with long text. [Issue:
    160069]

  - Disable find if constrained window is shown. [Issue:
    156969]

  - Enable fullscreen for apps windows. [Issue: 161246]

  - Fixed broken profile with system-wide installation and     UserDataDir & DiskCacheDir policy. [Issue: 161336]

  - Fixed stability crashes like 158747, 159437, 149139,     160914, 160401, 161858, 158747, 156878

  - Fixed graphical corruption in Dust. [Issue: 155258]

  - Fixed scrolling issue. [Issue: 163553]

Versions of Google Chrome earlier than 23.0.1271.97 are potentially affected by the following vulnerabilities :

  - Use-after-free errors exist related to visibility events and the URL loader. (CVE-2012-5139, CVE-2012-5140)
  - An unspecified error exists related to instantiation of the 'Chromoting' client plugin. (CVE-2012-5141)
  - An unspecified error exists related to history navigation that can lead to application crashes. (CVE-2012-5142)
  - An integer overflow error exists related to the 'PPAPI' image buffers. (CVE-2012-5143)
  - A stack corruption error exists related to 'AAC' decoding. (CVE-2012-5144)
  - The bundled version of Adobe Flash Player contains flaws that can lead to arbitrary code execution. (CVE-2012-5676, CVE-2012-5677, CVE-2012-5678)

ID	Name	Product	Family	Published	Updated	Severity
70112	GLSA-201309-16 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	9/25/2013	1/6/2021	critical
63232	Google Chrome < 23.0.1271.97 Multiple Vulnerabilities	Nessus	Windows	12/12/2012	4/11/2022	critical
63256	FreeBSD : chromium -- multiple vulnerabilities (51f84e28-444e-11e2-8306-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	12/13/2012	1/6/2021	critical
74848	openSUSE Security Update : chromium (openSUSE-SU-2012:1682-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
800913	Google Chrome < 23.0.1271.97 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/13/2012		high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

high