Google Chrome < 43.0.2357.134 Multiple RCE Vulnerabilities
High Nessus Network Monitor Plugin ID 8882
Synopsis
The remote host is utilizing a web browser that is affected by multiple vulnerabilities.
Description
The version of Google Chrome on the remote host is prior to 43.0.2357.134 and is affected by the following vulnerabilities in the Adobe Flash player component :
- A use-after-free error exists in the opaqueBackground class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5122)
- A use-after-free error exists in the BitmapData class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5123)
Solution
Update the Chrome browser to 43.0.2357.134 or later.