The Chromium update to version 17.0.945 and v8 update to version 3.7.8.0 resolve serveral bugs as well as a security bug in v8 that could potentially be exploited to execute arbitrary code (CVE-2011-3900).

The remote host is affected by the vulnerability described in GLSA-201111-05 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. The attacker also could cause       a Java applet to run without user confirmation.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote host is earlier than 15.0.874.121 and is affected by an out-of-bounds memory write in the V8 JavaScript engine.  Such an error can cause data corruption, application crashes or can potentially allow code execution.

Versions of Google Chrome earlier than 15.0.874.121 are affected by a code execution vulnerability due to an out-of-bounds write in v8.  A remote, unauthenticated attacker, exploiting this flaw, could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

ID	Name	Product	Family	Published	Updated	Severity
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	12/8/2010	1/6/2021	critical
74526	openSUSE Security Update : v8 / chromium (openSUSE-2011-53)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	high
56901	GLSA-201111-05 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	11/22/2011	1/6/2021	high
56920	Google Chrome < 15.0.874.121 V8 Out-of-bounds Write Unspecified Remote Memory Corruption	Nessus	Windows	11/22/2011	4/11/2022	high
6095	Google Chrome < 15.0.874.121 Code Execution	Nessus Network Monitor	Web Clients	11/18/2011	3/6/2019	high
800968	Google Chrome < 15.0.874.121 Code Execution Vulnerability	Log Correlation Engine	Web Clients	11/18/2011		high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high