| Beschreibung: | Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.
Vulnerability Insight:
The following package is affected: chromium
CVE-2011-3057
Google V8, as used in Google Chrome before 17.0.963.83, allows remote
attackers to cause a denial of service via vectors that trigger an
invalid read operation.
CVE-2011-3058
Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP
encoding system, which might allow remote attackers to conduct
cross-site scripting (XSS) attacks via unspecified vectors.
CVE-2011-3059
Google Chrome before 18.0.1025.142 does not properly handle SVG text
elements, which allows remote attackers to cause a denial of service
(out-of-bounds read) via unspecified vectors.
CVE-2011-3060
Google Chrome before 18.0.1025.142 does not properly handle text
fragments, which allows remote attackers to cause a denial of service
(out-of-bounds read) via unspecified vectors.
CVE-2011-3061
Google Chrome before 18.0.1025.142 does not properly check X.509
certificates before use of a SPDY proxy, which might allow
man-in-the-middle attackers to spoof servers or obtain sensitive
information via a crafted certificate.
CVE-2011-3062
Off-by-one error in the OpenType Sanitizer in Google Chrome before
18.0.1025.142 allows remote attackers to cause a denial of service or
possibly have unspecified other impact via a crafted OpenType file.
CVE-2011-3063
Google Chrome before 18.0.1025.142 does not properly validate the
renderer's navigation requests, which has unspecified impact and
remote attack vectors.
CVE-2011-3064
Use-after-free vulnerability in Google Chrome before 18.0.1025.142
allows remote attackers to cause a denial of service or possibly have
unspecified other impact via vectors related to SVG clipping.
CVE-2011-3065
Skia, as used in Google Chrome before 18.0.1025.142, allows remote
attackers to cause a denial of service (memory corruption) or possibly
have unspecified other impact via unknown vectors.
This VT has been deprecated and is therefore no longer functional.
Solution:
Update your system with the appropriate patches or
software upgrades.
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
