Lucene search

K
nessusTenable8130.PASL
HistoryFeb 21, 2014 - 12:00 a.m.

Google Chrome < 33.0.1750.117 Multiple Vulnerabilities

2014-02-2100:00:00
Tenable
www.tenable.com
9

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.034 Low

EPSS

Percentile

91.4%

The Google Chrome browser detected on the remote system is older than version 33.0.1750.117, and is therefore vulnerable to the following issues:

  • Undisclosed vulnerability exists with relative paths in Windows sandbox named pipe policy (CVE-2013-6652)

  • Use-after free issues related to web contents (CVE-2013-6653) and layout (CVE-2013-6655, CVE-2013-6658)

  • Undisclosed vulnerability in Bad cast in SVG (CVE-2013-6654)

  • Information-disclosure vulnerabilities with XSS auditor (CVE-2013-6656, CVE-2013-6657) and drag-and-drop (CVE-2013-6660)

  • Security-bypass vulnerability during certificates validation in a TLS handshake (CVE-2013-6659)

  • Other additional issues undisclosed by the vendor (CVE-2013-6661)

Binary data 8130.pasl
VendorProductVersionCPE
googlechromecpe:/a:google:chrome

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.034 Low

EPSS

Percentile

91.4%