Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10703
HistoryDec 01, 2015 - 12:00 a.m.

KLA10703 Multiple vulnerabilities in Google Chrome

2015-12-0100:00:00
Kaspersky Lab
threats.kaspersky.com
19

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Detect date:

12/01/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions or execute arbitrary code.

Affected products:

Google Chrome versions earlier than 47.0.2526.73 (all branches)

Solution:

Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Chrome

Original advisories:

Google releases blog entry

Impacts:

ACE

Related products:

Google Chrome

CVE-IDS:

CVE-2015-6766

Exploitation:

Public exploits exist for this vulnerability.

References

Related

prion 1
debiancve 1
cve 1
ubuntucve 1
nessus 9
openvas 9
ubuntu 1
osv 1
debian 2
mageia 1
archlinux 1
threatpost 1
redhat 1
chrome 1
freebsd 1
suse 2
gentoo 1
prion
prion
Design/Logic Flaw
2015-12-06 01:59:00
debiancve
debiancve
CVE-2015-6766
2015-12-06 01:59:00
cve
cve
CVE-2015-6766
2015-12-06 01:59:00
ubuntucve
ubuntucve
CVE-2015-6766
2015-12-05 00:00:00
nessus
nessus
Google Chrome < 47.0.2526.73 Multiple Vulnerabilities
2015-12-07 00:00:00
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2825-1)
2015-12-11 00:00:00
RHEL 6 : chromium-browser (RHSA-2015:2545)
2015-12-04 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2825-1)
2015-12-11 00:00:00
Debian Security Advisory DSA 3415-1 (chromium-browser - security update)
2015-12-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0467)
2015-12-10 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-12-10 00:00:00
osv
osv
chromium-browser - security update
2015-12-09 00:00:00
debian
debian
[SECURITY] [DSA 3415-1] chromium-browser security update
2015-12-10 02:01:17
[SECURITY] [DSA 3415-1] chromium-browser security update
2015-12-10 02:01:17
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-12-09 13:53:03
archlinux
archlinux
chromium: multiple issues
2015-12-02 00:00:00
threatpost
threatpost
Google Plans to End Chrome for 32-bit Linux, Releases Chrome 47
2015-12-02 11:18:45
redhat
redhat
(RHSA-2015:2545) Critical: chromium-browser security update
2015-12-03 00:00:00
chrome
chrome
Stable Channel Update
2015-12-01 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-12-01 00:00:00
suse
suse
Security update for Chromium (important)
2015-12-17 13:11:20
Security update for Chromium (important)
2015-12-17 13:10:52
gentoo
gentoo
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON
Related for KLA10703
prion1debiancve1cve1ubuntucve1nessus9openvas9ubuntu1osv1debian2mageia1archlinux1threatpost1redhat1chrome1freebsd1suse2gentoo1