Vulnerabilities > CVE-2010-2649 - Unspecified vulnerability in Google Chrome

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
google
nessus
NVD
Published: 2010-07-06
Updated: 2024-11-21

Summary

Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.

Vulnerable Configurations

Part Description Count
Application
Google
491

Nessus

NASL familyWindows
NASL idGOOGLE_CHROME_5_0_375_99.NASL
descriptionThe version of Google Chrome installed on the remote host is earlier than 5.0.375.99. It therefore is reportedly affected by multiple vulnerabilities : - An unspecified error allows an out-of-bounds read with WebGL. (Issue #42396) - An unspecified error exists in the process of isolating sandboxed iframes. (Issue #42575, #42980) - An unspecified memory corruption error exists in the handling invalid SVG images. (Issue #43488) - An unspecified memory corruption error exists in the implementation of a bidirectional algorithm. (Issue #44424) - An unspecified error in the processing of certain invalid images can lead to application crashes. (Issue #45164) - An unspecified memory corruption error exists in the processing of PNG images and can lead to application crashes. (Issue #45983) - An unspecified memory corruption error exists in the processing of CSS. (Issue #46360) - An unspecified error exists in the handling of print dialogs. (Issue #46575) - An unspecified error exists in the handling of modal dialogs and can lead to application crashes. (Issue #47056)
last seen2020-06-01
modified2020-06-02
plugin id47595
published2010-07-05
reporterThis script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/47595
titleGoogle Chrome < 5.0.375.99 Multiple Vulnerabilities

Oval

accepted2013-08-12T04:00:45.283-04:00
classvulnerability
contributors
  • nameAntu Sanadi
    organizationSecPod Technologies
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameMaria Kedovskaya
    organizationALTX-SOFT
definition_extensions
commentGoogle Chrome is installed
ovaloval:org.mitre.oval:def:11914
descriptionUnspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.
familywindows
idoval:org.mitre.oval:def:11974
statusaccepted
submitted2010-08-26T03:49:03.271-04:00
titleUnspecified vulnerability in Google Chrome before 5.0.375.99 related to an invalid image.
version50

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1) 在使用WebGL时Chrome中可能出现越界读访问错误。 2) Chrome没有正确地隔离沙盒中的IFRAME元素。 3) 无效的SVG文档可能触发内存破坏。 4) Chrome中Unicode双向算法实现中的错误可能导致内存破坏。 5) Chrome CSS实现没有正确地渲染样式，可能触发内存破坏。 6) Chrome没有正确的实现modal对话框，可能导致拒绝服务。 Google Chrome 5.0 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.google.com
idSSV:19922
last seen2017-11-19
modified2010-07-08
published2010-07-08
reporterRoot
titleGoogle Chrome 5.0.375.99更新修复多个安全漏洞

References