Google Chrome < 58.0.3029.81 Multiple Vulnerabilities (deprecated)

high Nessus Network Monitor Plugin ID 700097

Synopsis

The remote host is utilizing a web browser that is affected by multiple attack vectors.

Description

The version of Google Chrome installed on the remote host is prior to 58.0.3029.81, and is affected by multiple vulnerabilities :

- An overflow condition exists in the 'spanSlowRate()' function in 'core/SkLinearBitmapPipeline_sample.h' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.
- An unspecified flaw exists that may allow a context-dependent attacker to have an unspecified impact. No further details have been provided.
- A flaw exists in 'builtins/builtins-regexp.cc' that is triggered when handling the advancing of string indexes. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.

Solution

Update the Chrome browser to 58.0.3029.81 or later.

Plugin Details

Severity: High

ID: 700097

Family: Web Clients

Published: 5/12/2017

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:google:chrome

Patch Publication Date: 3/17/2017

Vulnerability Publication Date: 3/17/2017

Reference Information

CVE: CVE-2017-5063

BID: 97939

Detections

Analytics