Kaspersky LabKLA10655KLA10655 Multiple vulnerabilities in Google Chrome
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.042 Low
EPSS
Percentile
92.1%
Detect date:
09/01/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions or obtain sensitive information.
Affected products:
Google Chrome versions earlier than 45.0.2454.85
Solution:
Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Google Chrome
Original advisories:
Impacts:
OSI
Related products:
CVE-IDS:
CVE-2015-12997.5Critical
CVE-2015-13005.0Critical
CVE-2015-13017.5Critical
CVE-2015-65817.5Critical
CVE-2015-12957.5Critical
CVE-2015-12965.0Critical
CVE-2015-12977.5Critical
CVE-2015-12984.3Warning
CVE-2015-65826.8High
CVE-2015-65834.3Warning
CVE-2015-65807.5Critical
CVE-2015-12947.5Critical
CVE-2015-12916.4High
CVE-2015-12925.0Critical
CVE-2015-12937.5Critical
References
googlechromereleases.blogspot.ru/2015/09/stable-channel-update.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+GoogleChromeReleases+(Google+Chrome+Releases)
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1291
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1292
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1293
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1294
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1295
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1296
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1297
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1298
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1299
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1300
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1301
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6580
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6581
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6582
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6583
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/chrome/browser/desktop/index.html
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.042 Low
EPSS
Percentile
92.1%