Vulnerabilities > CVE-2010-2646 - Unspecified vulnerability in Google Chrome

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
google
nessus
NVD
Published: 2010-07-06
Updated: 2024-11-21

Summary

Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors.

Vulnerable Configurations

Part Description Count
Application
Google
491

Nessus

  • NASL familyWindows
    NASL idGOOGLE_CHROME_5_0_375_99.NASL
    descriptionThe version of Google Chrome installed on the remote host is earlier than 5.0.375.99. It therefore is reportedly affected by multiple vulnerabilities : - An unspecified error allows an out-of-bounds read with WebGL. (Issue #42396) - An unspecified error exists in the process of isolating sandboxed iframes. (Issue #42575, #42980) - An unspecified memory corruption error exists in the handling invalid SVG images. (Issue #43488) - An unspecified memory corruption error exists in the implementation of a bidirectional algorithm. (Issue #44424) - An unspecified error in the processing of certain invalid images can lead to application crashes. (Issue #45164) - An unspecified memory corruption error exists in the processing of PNG images and can lead to application crashes. (Issue #45983) - An unspecified memory corruption error exists in the processing of CSS. (Issue #46360) - An unspecified error exists in the handling of print dialogs. (Issue #46575) - An unspecified error exists in the handling of modal dialogs and can lead to application crashes. (Issue #47056)
    last seen2020-06-01
    modified2020-06-02
    plugin id47595
    published2010-07-05
    reporterThis script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/47595
    titleGoogle Chrome < 5.0.375.99 Multiple Vulnerabilities
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-1195-1.NASL
    descriptionA large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id55967
    published2011-08-24
    reporterUbuntu Security Notice (C) 2011-2019 Canonical, Inc. / NASL script (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/55967
    titleUbuntu 10.04 LTS / 10.10 : webkit vulnerabilities (USN-1195-1)

Oval

accepted2013-08-12T04:00:46.144-04:00
classvulnerability
contributors
  • nameAntu Sanadi
    organizationSecPod Technologies
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameMaria Kedovskaya
    organizationALTX-SOFT
definition_extensions
commentGoogle Chrome is installed
ovaloval:org.mitre.oval:def:11914
descriptionGoogle Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors.
familywindows
idoval:org.mitre.oval:def:11981
statusaccepted
submitted2010-08-26T03:49:03.271-04:00
titleUnspecified Vulnerability in solate sandboxed IFRAME elements in Google Chrome before 5.0.375.99
version50

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1) 在使用WebGL时Chrome中可能出现越界读访问错误。 2) Chrome没有正确地隔离沙盒中的IFRAME元素。 3) 无效的SVG文档可能触发内存破坏。 4) Chrome中Unicode双向算法实现中的错误可能导致内存破坏。 5) Chrome CSS实现没有正确地渲染样式，可能触发内存破坏。 6) Chrome没有正确的实现modal对话框，可能导致拒绝服务。 Google Chrome 5.0 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.google.com
idSSV:19922
last seen2017-11-19
modified2010-07-08
published2010-07-08
reporterRoot
titleGoogle Chrome 5.0.375.99更新修复多个安全漏洞

References