The version of Google Chrome installed on the remote Windows host is prior to 57.0.2987.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 2017_03_stable-channel-update-for-desktop_29 advisory.

  - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and     57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a     crafted HTML page, related to Array.prototype.indexOf. (CVE-2017-5053)

  - A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a     remote attacker to perform an out of bounds memory read via a crafted HTML page. (CVE-2017-5055)

  - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and     57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML     page. (CVE-2017-5054)

  - An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac,     Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory     corruption via a crafted HTML page that triggers improper casting. (CVE-2017-5052)

  - A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and     57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted     HTML page. (CVE-2017-5056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 57.0.2987.133 Multiple Vulnerabilities

critical Nessus Plugin ID 99136

Version 1.9