Vulnerabilities > CVE-2010-2650 - Unspecified vulnerability in Google Chrome

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
critical
nessus

Summary

Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs."

Vulnerable Configurations

Part Description Count
Application
Google
488

Nessus

NASL familyWindows
NASL idGOOGLE_CHROME_5_0_375_99.NASL
descriptionThe version of Google Chrome installed on the remote host is earlier than 5.0.375.99. It therefore is reportedly affected by multiple vulnerabilities : - An unspecified error allows an out-of-bounds read with WebGL. (Issue #42396) - An unspecified error exists in the process of isolating sandboxed iframes. (Issue #42575, #42980) - An unspecified memory corruption error exists in the handling invalid SVG images. (Issue #43488) - An unspecified memory corruption error exists in the implementation of a bidirectional algorithm. (Issue #44424) - An unspecified error in the processing of certain invalid images can lead to application crashes. (Issue #45164) - An unspecified memory corruption error exists in the processing of PNG images and can lead to application crashes. (Issue #45983) - An unspecified memory corruption error exists in the processing of CSS. (Issue #46360) - An unspecified error exists in the handling of print dialogs. (Issue #46575) - An unspecified error exists in the handling of modal dialogs and can lead to application crashes. (Issue #47056)
last seen2020-06-01
modified2020-06-02
plugin id47595
published2010-07-05
reporterThis script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/47595
titleGoogle Chrome < 5.0.375.99 Multiple Vulnerabilities

Oval

accepted2013-08-12T04:00:12.516-04:00
classvulnerability
contributors
  • nameAntu Sanadi
    organizationSecPod Technologies
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
  • nameMaria Kedovskaya
    organizationALTX-SOFT
definition_extensions
commentGoogle Chrome is installed
ovaloval:org.mitre.oval:def:11914
descriptionUnspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs."
familywindows
idoval:org.mitre.oval:def:11438
statusaccepted
submitted2010-08-26T03:49:03.271-04:00
titleUnspecified vulnerability in Google Chrome before 5.0.375.99 related to an annoyance with print dialogs
version50

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞,用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1) 在使用WebGL时Chrome中可能出现越界读访问错误。 2) Chrome没有正确地隔离沙盒中的IFRAME元素。 3) 无效的SVG文档可能触发内存破坏。 4) Chrome中Unicode双向算法实现中的错误可能导致内存破坏。 5) Chrome CSS实现没有正确地渲染样式,可能触发内存破坏。 6) Chrome没有正确的实现modal对话框,可能导致拒绝服务。 Google Chrome 5.0 厂商补丁: Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.google.com
idSSV:19922
last seen2017-11-19
modified2010-07-08
published2010-07-08
reporterRoot
titleGoogle Chrome 5.0.375.99更新修复多个安全漏洞