Lucene search

K
openvasCopyright (C) 2024 Greenbone AGOPENVAS:1361412562310834259
HistoryJul 17, 2024 - 12:00 a.m.

Google Chrome Security Update (stable-channel-update-for-desktop-2024-07) - Windows

2024-07-1700:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
5
google chrome
security update
cve-2024-6772
cve-2024-6773
cve-2024-6774
v8
screen capture
arbitrary code
denial of service
update
vendorfix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

Low

Google Chrome is prone to multiple
vulnerabilities.

# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.834259");
  script_version("2024-07-19T05:05:32+0000");
  script_cve_id("CVE-2024-6772", "CVE-2024-6773", "CVE-2024-6774", "CVE-2024-6775",
                "CVE-2024-6776", "CVE-2024-6777", "CVE-2024-6778", "CVE-2024-6779");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_tag(name:"last_modification", value:"2024-07-19 05:05:32 +0000 (Fri, 19 Jul 2024)");
  script_tag(name:"creation_date", value:"2024-07-17 10:28:17 +0530 (Wed, 17 Jul 2024)");
  script_name("Google Chrome Security Update (stable-channel-update-for-desktop-2024-07) - Windows");

  script_tag(name:"summary", value:"Google Chrome is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"These vulnerabilities exist:

  - CVE-2024-6772: Inappropriate implementation in V8.

  - CVE-2024-6773: Type Confusion in V8.

  - CVE-2024-6774: Use after free in Screen Capture.");

  script_tag(name: "impact" , value:"Successful exploitation will allow
  attackers to run arbitrary code, disclose sensitive information, and cause
  denial of service.");

  script_tag(name: "affected" , value:"Google Chrome prior to version
  126.0.6478.182 on Windows");

  script_tag(name: "solution", value:"Update to version 126.0.6478.182/183 or
  later.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"registry");
  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2024 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_win.nasl");
  script_mandatory_keys("GoogleChrome/Win/Ver");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_is_less(version:vers, test_version:"126.0.6478.182")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"126.0.6478.182/183", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

Low