Lucene search

K
nessusTenable8880.PASL
HistorySep 25, 2015 - 12:00 a.m.

Google Chrome < 43.0.2357.130 Multiple Vulnerabilities

2015-09-2500:00:00
Tenable
www.tenable.com
10

The version of Google Chrome on the remote host is prior to 43.0.2357.130 and is affected by the following vulnerabilities :

  • A scheme validation error exists in WebUI. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-1266)
  • A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw that is triggered when handling the creation context passed through public APIs. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1267)
  • A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw in its V8 bindings. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1268)
  • A normalization bypass vulnerability exists in the HSTS/HPKP preload list. A remote attacker can exploit this to bypass HSTS/HPKP preloads and have a connection use HTTP instead of the expected HTTPS. (CVE-2015-1269)
Binary data 8880.pasl
VendorProductVersion
googlechrome