Google Chrome < 43.0.2357.134 Multiple RCE Vulnerabilities

High Nessus Network Monitor Plugin ID 8882

Synopsis

The remote host is utilizing a web browser that is affected by multiple vulnerabilities.

Description

The version of Google Chrome on the remote host is prior to 43.0.2357.134 and is affected by the following vulnerabilities in the Adobe Flash player component :

- A use-after-free error exists in the opaqueBackground class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5122)
- A use-after-free error exists in the BitmapData class in the ActionScript 3 (AS3) implementation. A remote attacker, via specially crafted Flash content, can dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-5123)

Solution

Update the Chrome browser to 43.0.2357.134 or later.

See Also

http://www.nessus.org/u?8156ecbe

https://helpx.adobe.com/security/products/flash-player/apsb15-18.html

Plugin Details

Severity: High

ID: 8882

Family: Web Clients

Published: 2015/09/25

Modified: 2018/09/16

Dependencies: 4645

Nessus ID: 84731, 84733

Risk Information

Risk Factor: High

CVSSv2

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 8.1

Temporal Score: 7.5

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:google:chrome

Patch Publication Date: 2015/07/14

Vulnerability Publication Date: 2015/07/10

Exploitable With

Core Impact

Metasploit (Adobe Flash opaqueBackground Use After Free)

Reference Information

CVE: CVE-2015-5122, CVE-2015-5123

BID: 75710, 75712