Lucene search

K
nessusTenable800947.PRM
HistoryOct 12, 2012 - 12:00 a.m.

Google Chrome < 22.0.1229.92 Multiple Vulnerabilities

2012-10-1200:00:00
Tenable
www.tenable.com
19

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.009

Percentile

83.1%

Versions of Google Chrome earlier than 22.0.1229.92 are potentially affected by the following vulnerabilities :

  • An unspecified error exists related to Skia text rendering can cause the application to crash. (CVE-2012-2900)

  • A race condition exists related to audio device handling. (CVE-2012-5108)

  • Out-of-bounds read errors exist related to ‘ICU’ regular expressions and the compositor. (CVE-2012-5109, CVE-2012-5110)

  • The ‘Pepper’ plugins are missing crash monitoring. (CVE-2012-5111)

Successful exploitation of any of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user’s privileges.

Binary data 800947.prm

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.009

Percentile

83.1%