Lucene search

K
nessusTenable8887.PRM
HistorySep 25, 2015 - 12:00 a.m.

Google Chrome OS < 43.0.2357.125 Multiple Vulnerabilities

2015-09-2500:00:00
Tenable
www.tenable.com
8

The version of Google Chrome OS on the remote mobile host is prior to 43.0.2357.125 and thus unpatched for the following vulnerabilities :

  • A scheme validation error exists in WebUI. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-1266)
  • A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw that is triggered when handling the creation context passed through public APIs. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1267)
  • A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw in its V8 bindings. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1268)
  • A normalization bypass vulnerability exists in the HSTS/HPKP preload list. A remote attacker can exploit this to bypass HSTS/HPKP preloads and have a connection use HTTP instead of the expected HTTPS. (CVE-2015-1269)
Binary data 8887.prm
VendorProductVersionCPE
googlechrome_oscpe:/a:google:chrome_os