Kaspersky LabKLA10546KLA10546 Multiple vulnerabilities in Google Chrome
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.044 Low
EPSS
Percentile
92.2%
Detect date:
04/14/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, cause denial of service or possible execute arbitrary code.
Affected products:
Google Chrome versions earlier than 42.0.2311.90
Solution:
Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Google Chrome
Original advisories:
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2015-12405.0Critical
CVE-2015-12387.5Critical
CVE-2015-12456.8High
CVE-2015-12445.0Critical
CVE-2015-12427.5Critical
CVE-2015-12414.3Warning
CVE-2015-12497.5Critical
CVE-2015-12484.3Warning
CVE-2015-12475.0Critical
CVE-2015-12465.0Critical
CVE-2015-12364.3Warning
CVE-2015-12377.5Critical
CVE-2015-12355.0Critical
References
googlechromereleases.blogspot.ru/2015/04/stable-channel-update_14.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+GoogleChromeReleases+(Google+Chrome+Releases)
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1235
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1236
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1237
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1238
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1240
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1241
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1242
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1244
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1245
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1246
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1247
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1248
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1249
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/c
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.044 Low
EPSS
Percentile
92.2%