Google Chrome < 40.0.2214.111 Multiple Vulnerabilities (Mac OS X)

High Nessus Plugin ID 81208


The remote Mac OS X host contains a web browser that is affected by multiple vulnerabilities.


The version of Google Chrome installed on the remote Mac OS X host is prior to 40.0.2214.111. It is, therefore, affected by the following vulnerabilities :

- Several use-after-free errors exist that allow arbitrary code execution. (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322)

- Several memory corruption errors exist that allow arbitrary code execution. (CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, CVE-2015-0330)

- Several type confusion errors exist that allow arbitrary code execution. (CVE-2015-0317, CVE-2015-0319)

- Several heap-based buffer-overflow errors exist that allow arbitrary code execution. (CVE-2015-0323, CVE-2015-0327)

- A buffer overflow error exists that allows arbitrary code execution. (CVE-2015-0324)

- Several null pointer dereference errors exist that have unspecified impacts. (CVE-2015-0325, CVE-2015-0326, CVE-2015-0328).

- A user-after-free error exists within the processing of invalid m3u8 playlists. A remote attacker, with a specially crafted m3u8 playlist file, can force a dangling pointer to be reused after it has been freed, allowing the execution of arbitrary code.

- A use-after-free error exists related to the DOM component. (CVE-2015-1209)

- A cross-origin bypass error exists related to the V8 JavaScript engine bindings. (CVE-2015-1210)

- A privilege escalation error exists related to service workers. (CVE-2015-1211)

- Various, unspecified errors exist. (CVE-2015-1212)


Upgrade to Google Chrome 40.0.2214.111 or later.

See Also

Plugin Details

Severity: High

ID: 81208

File Name: macosx_google_chrome_40_0_2214_111.nasl

Version: $Revision: 1.16 $

Type: local

Agent: macosx

Published: 2015/02/06

Modified: 2017/06/06

Dependencies: 70890

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:google:chrome

Required KB Items: MacOSX/Google Chrome/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2015/02/05

Vulnerability Publication Date: 2015/02/02

Exploitable With


Core Impact

Metasploit (Adobe Flash Player PCRE Regex Vulnerability)

Reference Information

CVE: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323, CVE-2015-0324, CVE-2015-0325, CVE-2015-0326, CVE-2015-0327, CVE-2015-0328, CVE-2015-0329, CVE-2015-0330, CVE-2015-0331, CVE-2015-1209, CVE-2015-1210, CVE-2015-1211, CVE-2015-1212

BID: 72429, 72497, 72514, 72698

OSVDB: 117853, 117947, 117948, 117949, 117967, 117968, 117969, 117970, 117971, 117972, 117973, 117974, 117975, 117976, 117977, 117978, 117979, 117980, 117981, 117982, 117983, 118279, 118280, 118281, 118282, 118288, 118289, 118597