Google Chrome < 20.0.1132.43 Multiple Vulnerabilities
high Nessus Plugin ID 59735
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote host contains a web browser that is affected by multiple vulnerabilities.Description
The version of Google Chrome installed on the remote host is earlier than 20.0.1132.43 and is, therefore, affected by the following vulnerabilities :- An error exists related to the loading of the 'metro' DLL. (CVE-2012-2764)
- An error exists related to the leaking of iframe fragment id. (CVE-2012-2815)
- An error exists that allows sandboxes to interfere with each other. (CVE-2012-2816)
- Multiple use-after-free errors exist related to table section handling, counter layout, SVG resource handling, SVG painting, first-letter handling and SVG reference handling. (CVE-2012-2817, CVE-2012-2818, CVE-2012-2823, CVE-2012-2824, CVE-2012-2829, CVE-2012-2831)
- An error exists related to texture handling that can cause application crashes. (CVE-2012-2819)
- Out-of-bounds read errors exist related to SVG filter handling and texture conversion. (CVE-2012-2820, CVE-2012-2826)
- An unspecified error exists related to autofill display actions. (CVE-2012-2821)
- Several 'OOB' read issues exist related to PDF processing. (CVE-2012-2822)
- A read error exists related to XSL handling.
(CVE-2012-2825)
- Several integer overflow issues exist related to PDF processing. (CVE-2012-2828)
- A pointer issue exists related to the setting of array values. (CVE-2012-2830)
- An uninitialized pointer issue exists related to the PDF image codec. (CVE-2012-2832)
- A buffer overflow error exists related to the PDF JavaScript API. (CVE-2012-2833)
- An integer overflow error exists related to the 'Matroska' container. (CVE-2012-2834)
Solution
Upgrade to Google Chrome 20.0.1132.43 or later.See Also
Plugin Details
Severity: High
ID: 59735
File Name: google_chrome_20_0_1132_43.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 6/27/2012
Updated: 11/15/2018
Dependencies: google_chrome_installed.nasl
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Temporal Vector: E:POC/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/a:google:chrome
Required KB Items: SMB/Google_Chrome/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/26/2012
Vulnerability Publication Date: 6/26/2012
Reference Information
CVE: CVE-2012-2764, CVE-2012-2815, CVE-2012-2816, CVE-2012-2817, CVE-2012-2818, CVE-2012-2819, CVE-2012-2820, CVE-2012-2821, CVE-2012-2822, CVE-2012-2823, CVE-2012-2824, CVE-2012-2825, CVE-2012-2826, CVE-2012-2828, CVE-2012-2829, CVE-2012-2830, CVE-2012-2831, CVE-2012-2832, CVE-2012-2833, CVE-2012-2834