Lucene search
+L

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Linux

🗓️ 14 Dec 2018 00:00:00Reported by Copyright (C) 2018 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 17 Views

Google Chrome Security Update for Linux - PDFium vulnerabilit

Related
Refs
Code
# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.814555");
  script_version("2024-02-09T14:47:30+0000");
  script_cve_id("CVE-2018-1748");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_tag(name:"last_modification", value:"2024-02-09 14:47:30 +0000 (Fri, 09 Feb 2024)");
  script_tag(name:"creation_date", value:"2018-12-14 12:54:35 +0530 (Fri, 14 Dec 2018)");
  script_name("Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Linux");

  script_tag(name:"summary", value:"Google Chrome is prone to multiple vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"The flaws exist due to use after frees in
  PDFium.

  Note: Use after free in PDFium. Reported by Anonymous on 2018-11-04(This
  issue was first addressed in the initial Stable release of Chrome 70, but
  received additional fixes in this release 71.0.3578.98");

  script_tag(name:"affected", value:"Google Chrome versions prior to 71.0.3578.98 on Linux.");

  script_tag(name:"solution", value:"Upgrade to Google Chrome version
  71.0.3578.98 or later. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");

  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop_12.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2018 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_lin.nasl");
  script_mandatory_keys("Google-Chrome/Linux/Ver");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_is_less(version:vers, test_version:"71.0.3578.98"))
{
  report = report_fixed_ver(installed_version:vers, fixed_version:"71.0.3578.98", install_path:path);
  security_message(data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Feb 2024 00:00Current
6.5Medium risk
Vulners AI Score6.5
17