Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10463
HistoryMar 03, 2015 - 12:00 a.m.

KLA10463 Multiple vulnerabilities in Google Chrome

2015-03-0300:00:00
Kaspersky Lab
threats.kaspersky.com
23

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.2%

JSON

Detect date:

03/03/2015

Severity:

Critical

Description:

Multiple critical vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions or inject arbitrary code.

Affected products:

Google Chrome versions earlier than 41.0.2272.76

Solution:

Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.

Original advisories:

Google blog entry

Impacts:

DoS

Related products:

Google Chrome

CVE-IDS:

CVE-2015-12237.5Critical
CVE-2015-12227.5Critical
CVE-2015-12187.5Critical
CVE-2015-12307.5Critical
CVE-2015-12277.5Critical
CVE-2015-12265.0Critical
CVE-2015-12255.0Critical
CVE-2015-12245.0Critical
CVE-2015-12217.5Critical
CVE-2015-12137.5Critical
CVE-2015-12127.5Critical
CVE-2015-12287.5Critical
CVE-2015-12295.0Critical
CVE-2015-12147.5Critical
CVE-2015-12206.8High
CVE-2015-12197.5Critical
CVE-2015-12177.5Critical
CVE-2015-12157.5Critical
CVE-2015-12167.5Critical

References

Related

threatpost 1
redhat 2
nessus 16
freebsd 2
openvas 14
suse 2
archlinux 2
mageia 2
gentoo 2
securityvulns 3
ubuntu 2
chrome 2
ubuntucve 20
zdi 1
cve 20
debiancve 20
prion 20
kitploit 1
threatpost
threatpost
Google Fixes 51 Bugs in Chrome 41
2015-03-04 13:58:40
redhat
redhat
(RHSA-2015:0627) Important: chromium-browser security update
2015-03-05 00:00:00
(RHSA-2015:0163) Important: chromium-browser security update
2015-02-10 00:00:00
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (8505e013-c2b3-11e4-875d-000c6e25e3e9)
2015-03-05 00:00:00
RHEL 6 : chromium-browser (RHSA-2015:0627)
2015-03-06 00:00:00
openSUSE Security Update : chromium (openSUSE-2015-228)
2015-03-17 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-03-03 00:00:00
chromium -- multiple vulnerabilities
2015-02-05 00:00:00
openvas
openvas
openSUSE: Security Advisory for Security (openSUSE-SU-2015:0505-1)
2015-03-17 00:00:00
Gentoo Security Advisory GLSA 201503-12
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2015-0123)
2022-01-28 00:00:00
suse
suse
Security update to Chromium 41.0.2272.76 (important)
2015-03-16 16:05:28
Security update for chromium (important)
2015-03-06 13:04:51
archlinux
archlinux
chromium: multiple issues
2015-03-05 00:00:00
chromium: multiple issues
2015-02-06 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-04-01 15:13:37
Updated chromium-browser-stable packages fix security vulnerabilities
2015-02-11 23:47:51
gentoo
gentoo
Chromium: Multiple vulnerabilities
2015-03-22 00:00:00
Chromium: Multiple vulnerabilities
2015-02-17 00:00:00
securityvulns
securityvulns
[USN-2521-1] Oxide vulnerabilities
2015-03-23 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2015-03-23 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2015-02-02 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-03-10 00:00:00
Oxide vulnerabilities
2015-02-10 00:00:00
chrome
chrome
Stable Channel Update
2015-03-03 00:00:00
Stable Channel Update
2015-02-05 00:00:00
ubuntucve
ubuntucve
CVE-2015-1229
2015-03-08 00:00:00
CVE-2015-1230
2015-03-08 00:00:00
CVE-2015-1228
2015-03-08 00:00:00
zdi
zdi
Google Chrome V8EventListenerList::findOrCreateWrapper Type Confusion Remote Code Execution Vulnerability
2015-03-12 00:00:00
cve
cve
CVE-2015-1230
2015-03-09 00:59:00
CVE-2015-1229
2015-03-09 00:59:00
CVE-2015-1228
2015-03-09 00:59:00
debiancve
debiancve
CVE-2015-1229
2015-03-09 00:59:00
CVE-2015-1228
2015-03-09 00:59:00
CVE-2015-1227
2015-03-09 00:59:00
prion
prion
Design/Logic Flaw
2015-03-09 00:59:00
Code injection
2015-03-09 00:59:00
Design/Logic Flaw
2015-03-09 00:59:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.2%

JSON
Related for KLA10463
threatpost1redhat2nessus16freebsd2openvas14suse2archlinux2mageia2gentoo2securityvulns3ubuntu2chrome2ubuntucve20zdi1cve20debiancve20prion20kitploit1