Detections
Analytics
Google Chrome < 2.0.172.31 WebKit Multiple Vulnerabilities
high Nessus Plugin ID 39356
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 2.0.172.31. It thus is reportedly affected by multiple issues :- A memory corruption issue exists in the way the WebKit handles recursion in certain DOM event handlers.
Successful exploitation of this issue could allow arbitrary code execution within the Google Chrome sandbox. (CVE-2009-1690)
- WebKit's handling of drag events is affected by an information disclosure issue. (CVE-2009-1718)
Solution
Upgrade to Google Chrome 2.0.172.31 or later.See Also
Plugin Details
Severity: High
ID: 39356
File Name: google_chrome_2_0_172_31.nasl
Version: 1.17
Type: Local
Agent: windows
Family: Windows
Published: 6/11/2009
Updated: 5/19/2026
Configuration: Enable thorough checks (optional)
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2009-1718
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS Score Source: CVE-2009-1718
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 6/9/2009
Reference Information
CVE: CVE-2009-1690, CVE-2009-1718