The remote host is affected by the vulnerability described in GLSA-201111-05 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. The attacker also could cause       a Java applet to run without user confirmation.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote host is earlier than 15.0.874.120.  It is, therefore, potentially affected by the following vulnerabilities :

    - A double-free error exists in the Theora decoder.
      (CVE-2011-3892)

    - Out-of-bounds read errors exist in the MVK and Vorbis       media handlers. (CVE-2011-3893)

    - A memory corruption error exists in the VP8 decoding.
      (CVE-2011-3894)

    - A heap overflow error exists in the Vorbis decoder.
      (CVE-2011-3895)

    - A buffer overflow error exists in shader variable       mapping functionality. (CVE-2011-3896)

    - A use-after-free error exists related to unspecified       editing. (CVE-2011-3897)

    - In JRE7, applets are allowed to run without the       proper permissions. (CVE-2011-3898)

Versions of Google Chrome earlier than 15.0.874.120 are affected by multiple vulnerabilities :

  - A double-free error exists in the Theora decoder. (CVE-2011-3892)

  - Out-of-bounds read errors exist in the MVK and Vorbis media handlers. (CVE-2011-3892)

  - A memory corruption error exists in the VP8 decoding. (CVE-2011-3894)

  - A heap overflow error exists in the Vorbis decoder. (CVE-2011-3895)

  - A buffer overflow error exists in the shader variable mapping functionality. (CVE-2011-3896)

  - A use-after-free error exists related to unspecified editing. (CVE-2011-3897)

  - In JRE7, applets are allowed to run without the proper permissions. (CVE-2011-3898)

ID	Name	Product	Family	Published	Updated	Severity
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	12/8/2010	1/6/2021	critical
56901	GLSA-201111-05 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	11/22/2011	1/6/2021	high
56779	Google Chrome < 15.0.874.120 Multiple Vulnerabilities	Nessus	Windows	11/11/2011	4/11/2022	high
800938	Google Chrome < 15.0.874.120 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	11/18/2011		high

Detections

Analytics

Plugins Search

critical

high

high

high