Lucene search

K
openvasCopyright (C) 2022 Greenbone AGOPENVAS:1361412562310821243
HistoryMay 13, 2022 - 12:00 a.m.

Google Chrome Security Update (stable-channel-update-for-desktop_10-2022-05) - Windows

2022-05-1300:00:00
Copyright (C) 2022 Greenbone AG
plugins.openvas.org
7
google chrome
windows
vulnerabilities
upgrade
execute arbitrary code
denial of service
web contents

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.6%

Google Chrome is prone to multiple
vulnerabilities.

# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.821243");
  script_version("2024-02-09T05:06:25+0000");
  script_cve_id("CVE-2022-1633", "CVE-2022-1634", "CVE-2022-1635", "CVE-2022-1636",
                "CVE-2022-1637", "CVE-2022-1638", "CVE-2022-1639", "CVE-2022-1640",
                "CVE-2022-1641");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2024-02-09 05:06:25 +0000 (Fri, 09 Feb 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2022-07-28 14:56:00 +0000 (Thu, 28 Jul 2022)");
  script_tag(name:"creation_date", value:"2022-05-13 18:11:53 +0530 (Fri, 13 May 2022)");
  script_name("Google Chrome Security Update (stable-channel-update-for-desktop_10-2022-05) - Windows");

  script_tag(name:"summary", value:"Google Chrome is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws are due to,

  - Multiple use after free errors.

  - Anappropriate implementation in Web Contents.");

  script_tag(name:"impact", value:"Successful exploitation will allow attackers
  to conduct execute arbitrary code, disclose sensitive information and cause
  denial of service condition.");

  script_tag(name:"affected", value:"Google Chrome version prior to 101.0.4951.64
  on Windows");

  script_tag(name:"solution", value:"Upgrade to Google Chrome version 101.0.4951.64
  or later. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");

  script_tag(name:"qod_type", value:"registry");

  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2022 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_win.nasl");
  script_mandatory_keys("GoogleChrome/Win/Ver");
  exit(0);
}
include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE)) exit(0);
vers = infos['version'];
path = infos['location'];

if(version_is_less(version:vers, test_version:"101.0.4951.64"))
{
  report = report_fixed_ver(installed_version:vers, fixed_version:"101.0.4951.64", install_path:path);
  security_message(data:report);
  exit(0);
}
exit(99);

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.6%