Lucene search

K
nessusTenable6673.PASL
HistoryJan 25, 2013 - 12:00 a.m.

Google Chrome < 24.0.1312.56 Multiple Vulnerabilities

2013-01-2500:00:00
Tenable
www.tenable.com
9

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.2%

Versions of Google Chrome earlier than 24.0.1312.56 are potentially affected by the following vulnerabilities :

  • A use-after-free vulnerability exists related to font handling and canvas. (CVE-2013-0839)

  • An error exists related to URL validation and the opening of new browser windows. (CVE-2013-0840)

  • An array index is not properly checked in relation to content blocking. (CVE-2013-0841)

  • An unspecified error exists related to handling null characters in embedded paths. (CVE-2013-0842)

  • An issue occurs when handling unsupported RTC sampling rates. Note: This particular issue only affects versions for Mac only. (CVE-2013-0843)
    Successful exploitation of some of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user’s privileges.

Binary data 6673.pasl
VendorProductVersionCPE
googlechromecpe:/a:google:chrome

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.2%