Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10585
HistoryMay 19, 2015 - 12:00 a.m.

KLA10585 Multiple vulnerabilities in Google Chrome

2015-05-1900:00:00
Kaspersky Lab
threats.kaspersky.com
40

10 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.7%

JSON

Detect date:

05/19/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, conduct cross-scripting attack, cause denial of service or execute arbitrary code.

Affected products:

Google Chrome versions earlier than 43.0.2357.65

Solution:

Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Google Chrome

Original advisories:

Google blog

Impacts:

ACE

Related products:

Google Chrome

CVE-IDS:

CVE-2015-12587.5Critical
CVE-2015-12597.5Critical
CVE-2015-12657.5Critical
CVE-2015-12516.8High
CVE-2015-12627.5Critical
CVE-2015-12644.3Warning
CVE-2015-12527.5Critical
CVE-2015-39107.5Critical
CVE-2015-12634.3Warning
CVE-2015-12607.5Critical
CVE-2015-12615.0Warning
CVE-2015-12556.8High
CVE-2015-12577.5Critical
CVE-2015-12567.5Critical
CVE-2015-12545.0Warning
CVE-2015-12537.5Critical

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 13
securityvulns 3
nessus 13
freebsd 1
redhat 1
debian 4
chrome 1
threatpost 1
osv 2
archlinux 1
mageia 3
ubuntu 1
gentoo 1
debiancve 17
prion 17
cve 17
ubuntucve 17
fedora 3
zdt 3
checkpoint_advisories 1
packetstorm 1
zdi 1
openvas
openvas
Debian Security Advisory DSA 3267-1 (chromium-browser - security update)
2015-05-22 00:00:00
Google Chrome Multiple Vulnerabilities - 02 - May15 (Mac OS X)
2015-05-27 00:00:00
Debian Security Advisory DSA 3267-1 (chromium-browser - security update)
2015-05-22 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-25 00:00:00
Google Chrome / Chromium multiple security vulnerabilities
2015-05-25 00:00:00
[SECURITY] [DSA 3315-1] chromium-browser security update
2015-07-26 00:00:00
nessus
nessus
RHEL 6 : chromium-browser (RHSA-2015:1023)
2015-05-26 00:00:00
openSUSE Security Update : Chromium (openSUSE-2015-390)
2015-06-01 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)
2015-05-20 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-05-19 00:00:00
redhat
redhat
(RHSA-2015:1023) Important: chromium-browser security update
2015-05-25 00:00:00
debian
debian
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-22 05:02:40
[SECURITY] [DSA 3267-1] chromium-browser security update
2015-05-22 05:02:40
[SECURITY] [DSA 3315-1] chromium-browser security update
2015-07-24 12:29:48
chrome
chrome
Stable Channel Update
2015-05-19 00:00:00
threatpost
threatpost
Google Fixes Sandbox Escape in Chrome
2015-05-19 13:19:05
osv
osv
chromium-browser - security update
2015-05-22 00:00:00
chromium-browser - security update
2015-07-23 00:00:00
archlinux
archlinux
chromium: multiple issues
2015-05-21 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-05-23 21:53:02
Updated libvpx package fixes security vulnerability
2015-07-01 15:40:22
Updated chromium-browser package fixes security vulnerabilities
2015-07-27 20:45:18
ubuntu
ubuntu
Oxide vulnerabilities
2015-05-21 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2015-06-23 00:00:00
debiancve
debiancve
CVE-2015-1259
2015-05-20 10:59:00
CVE-2015-3910
2015-05-20 10:59:00
CVE-2015-1261
2015-05-20 10:59:00
prion
prion
Code injection
2015-05-20 10:59:00
Design/Logic Flaw
2015-05-20 10:59:00
Buffer overflow
2015-05-20 10:59:00
cve
cve
CVE-2015-1261
2015-05-20 10:59:00
CVE-2015-1259
2015-05-20 10:59:00
CVE-2015-3910
2015-05-20 10:59:00
ubuntucve
ubuntucve
CVE-2015-1261
2015-05-20 00:00:00
CVE-2015-1258
2015-05-20 00:00:00
CVE-2015-3910
2015-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: libvpx-1.3.0-7.fc22
2015-09-24 08:32:37
[SECURITY] Fedora 21 Update: libvpx-1.3.0-7.fc21
2015-10-05 22:55:46
[SECURITY] Fedora 23 Update: libvpx-1.4.0-5.fc23
2015-09-20 15:26:23
zdt
zdt
Google Chrome 43.0 - Certificate MIME Handling Integer Overflow Exploit
2015-08-15 00:00:00
Google Chrome SpeechRecognitionClient Use-After-Free Remote Code Execution Vulnerability
2015-05-24 00:00:00
Chrome Blink SpeechRecognitionController Use-After-Free Exploit
2016-11-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Google Chrome blink buildShadowAndInstanceTree Use After Free (CVE-2015-1256)
2015-07-15 00:00:00
packetstorm
packetstorm
Chrome Blink SpeechRecognitionController Use-After-Free
2016-11-23 00:00:00
zdi
zdi
Google Chrome SpeechRecognitionClient Use-After-Free Remote Code Execution Vulnerability
2015-05-19 00:00:00

10 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.7%

JSON
Related for KLA10585
openvas13securityvulns3nessus13freebsd1redhat1debian4chrome1threatpost1osv2archlinux1mageia3ubuntu1gentoo1debiancve17prion17cve17ubuntucve17fedora3zdt3checkpoint_advisories1packetstorm1zdi1