Google Chrome < 28.0.1500.95 Multiple Vulnerabilities

2013-07-3100:00:00

Tenable

www.tenable.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.021

Percentile

89.3%

The remote host has Google Chrome browser installed. Versions of Google Chrome prior to 28.0.1500.95 are affected by the following vulnerabilities :

A cross-origin restriction bypass error exists related to HTML frames. (CVE-2013-2881)
A type-confusion error exists in the V8 JavaScript engine. (CVE-2013-2882)
Use-after-free errors exist related to MutationObserver, DOM and input handling.(CVE-2013-2883, CVE-2013-2884, CVE-2013-2885)
Unspecified errors exist with no further details. (CVE-2013-2886)