Google Chrome < Multiple Vulnerabilities

High Nessus Plugin ID 45086


The remote host contains a web browser that is affected by multiple vulnerabilities.


The version of Google Chrome installed on the remote host is prior to It is, therefore, affected by multiple vulnerabilities :

- Multiple race conditions and pointer errors in the sandbox infrastructure. (Issue #28804, #31880)

- An error relating to persisted metadata such as Web Databases and STS. (Issue #20801, #33445)

- HTTP headers are processed before the SafeBrowsing check. (Issue #33572)

- A memory error with malformed SVG. (Issue #34978)

- Multiple integer overflows in WebKit JavaScript objects.
(Issue #35724)

- The HTTP basic auth dialog truncates URLs.
(Issue #36772)

- It is possible to bypass the download warning dialog.
(Issue #37007)

- An unspecified cross-origin bypass vulnerability.
(Issue #37383)

- A memory error relating to empty SVG elements. Note that this only affects Chrome Beta versions.
(Issue #37061)


Upgrade to Google Chrome or later.

See Also

Plugin Details

Severity: High

ID: 45086

File Name: google_chrome_4_1_249_1036.nasl

Version: $Revision: 1.17 $

Type: local

Agent: windows

Family: Windows

Published: 2010/03/18

Modified: 2016/05/20

Dependencies: 34196

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:google:chrome

Required KB Items: SMB/Google_Chrome/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/03/17

Vulnerability Publication Date: 2010/03/17

Reference Information

CVE: CVE-2010-1229, CVE-2010-1230, CVE-2010-1231, CVE-2010-1232, CVE-2010-1233, CVE-2010-1234, CVE-2010-1235, CVE-2010-1236, CVE-2010-1237

BID: 38829, 73629, 73673

OSVDB: 63108, 63109, 63110, 63111, 63112, 63113, 63114, 63519, 65341

Secunia: 39029