Lucene search

K
openvasCopyright (C) 2024 Greenbone AGOPENVAS:1361412562310834261
HistoryJul 17, 2024 - 12:00 a.m.

Google Chrome Security Update (stable-channel-update-for-desktop-2024-07) - Mac OS X

2024-07-1700:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
8
google chrome
security update
mac os x
cve-2024-6772
cve-2024-6773
cve-2024-6774
vulnerabilities
exploitation
denial of service
update
version 126.0.6478.182

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

Low

Google Chrome is prone to multiple
vulnerabilities.

# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:google:chrome";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.834261");
  script_version("2024-07-19T05:05:32+0000");
  script_cve_id("CVE-2024-6772", "CVE-2024-6773", "CVE-2024-6774", "CVE-2024-6775",
                "CVE-2024-6776", "CVE-2024-6777", "CVE-2024-6778", "CVE-2024-6779");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_tag(name:"last_modification", value:"2024-07-19 05:05:32 +0000 (Fri, 19 Jul 2024)");
  script_tag(name:"creation_date", value:"2024-07-17 10:28:17 +0530 (Wed, 17 Jul 2024)");
  script_name("Google Chrome Security Update (stable-channel-update-for-desktop-2024-07) - Mac OS X");

  script_tag(name:"summary", value:"Google Chrome is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"These vulnerabilities exist:

  - CVE-2024-6772: Inappropriate implementation in V8.

  - CVE-2024-6773: Type Confusion in V8.

  - CVE-2024-6774: Use after free in Screen Capture.");

  script_tag(name: "impact" , value:"Successful exploitation will allow
  attackers to run arbitrary code, disclose sensitive information, and cause
  denial of service.");

  script_tag(name: "affected" , value:"Google Chrome prior to version
  126.0.6478.182 on Mac OS X");

  script_tag(name: "solution", value:"Update to version 126.0.6478.182/183 or
  later.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name:"URL", value:"https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2024 Greenbone AG");
  script_family("General");
  script_dependencies("gb_google_chrome_detect_macosx.nasl");
  script_mandatory_keys("GoogleChrome/MacOSX/Version");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_is_less(version:vers, test_version:"126.0.6478.182")) {
  report = report_fixed_ver(installed_version:vers, fixed_version:"126.0.6478.182/183", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

Low