| Descripción: | Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.
Vulnerability Insight:
The following package is affected: chromium
CVE-2011-3078
Use-after-free vulnerability in Google Chrome before 18.0.1025.168
allows remote attackers to cause a denial of service or possibly have
unspecified other impact via vectors related to the floating of
elements, a different vulnerability than CVE-2011-3081.
CVE-2011-3079
The Inter-process Communication (IPC) implementation in Google Chrome
before 18.0.1025.168 does not properly validate messages, which has
unspecified impact and attack vectors.
CVE-2011-3080
Race condition in the Inter-process Communication (IPC) implementation
in Google Chrome before 18.0.1025.168 allows attackers to bypass
intended sandbox restrictions via unspecified vectors.
CVE-2011-3081
Use-after-free vulnerability in Google Chrome before 18.0.1025.168
allows remote attackers to cause a denial of service or possibly have
unspecified other impact via vectors related to the floating of
elements, a different vulnerability than CVE-2011-3078.
CVE-2012-1521
Use-after-free vulnerability in the XML parser in Google Chrome before
18.0.1025.168 allows remote attackers to cause a denial of service or
possibly have unspecified other impact via unknown vectors.
This VT has been deprecated and is therefore no longer functional.
Solution:
Update your system with the appropriate patches or
software upgrades.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
