Google Chrome < 31.0.1650.57 Multiple Remote Code Execution Vulnerabilities

2013-12-0500:00:00

Tenable

www.tenable.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

89.0%

JSON

The remote host has Google Chrome browser installed. Versions of Google Chrome prior to 31.0.1650.57 are affected by the following vulnerabilities that have been shown to be exploitable for the purpose of remote code execution:

Unspecified integer overflow flaw (CVE-2013-6632)
A flaw in the ClipboardMessageFilter that can be triggered to bypass the Chrome sandbox and execute arbitrary code. (CVE-2013-6802)