Google Chrome < 8.0.552.224 Multiple Vulnerabilities
high Nessus Plugin ID 51161
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 8.0.552.224. Such versions are reportedly affected by multiple vulnerabilities :- A bad extension can cause the browser to crash in tab handling. (Issue #60761)
- A NULL pointer can lead to a browser crash in web worker handling. (Issue #63592)
- An out-of-bounds read can occur in CSS parsing.
(Issue #63866)
- Stale pointers could occur in cursor handling.
(Issue #64959)
Solution
Upgrade to Google Chrome 8.0.552.224 or later.See Also
Plugin Details
Severity: High
ID: 51161
File Name: google_chrome_8_0_552_224.nasl
Version: 1.13
Type: local
Agent: windows
Family: Windows
Published: 12/14/2010
Updated: 11/15/2018
Dependencies: google_chrome_installed.nasl
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Temporal Vector: E:U/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 12/13/2010
Vulnerability Publication Date: 12/13/2010
Reference Information
CVE: CVE-2010-4574, CVE-2010-4575, CVE-2010-4576, CVE-2010-4577, CVE-2010-4578
Secunia: 42605