Test ID:	1.3.6.1.4.1.25623.1.0.69328
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2192-1)
Summary:	The remote host is missing an update for the Debian 'chromium-browser' package(s) announced via the DSA-2192-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'chromium-browser' package(s) announced via the DSA-2192-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-0779 Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension. CVE-2011-1290 Integer overflow in WebKit allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011. For the stable distribution (squeeze), these problems have been fixed in version 6.0.472.63~ r59945-5+squeeze4. For the testing distribution (wheezy), these problems will be fixed soon. For the unstable distribution (sid), these problems have been fixed in version 10.0.648.133~ r77742-1. We recommend that you upgrade your chromium-browser packages. Affected Software/OS: 'chromium-browser' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0779 Debian Security Information: DSA-2192 (Google Search) http://www.debian.org/security/2011/dsa-2192 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14540 http://secunia.com/advisories/43782 http://www.vupen.com/english/advisories/2011/0671 Common Vulnerability Exposure (CVE) ID: CVE-2011-1290 http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html BugTraq ID: 46849 http://www.securityfocus.com/bid/46849 Bugtraq: 20110414 ZDI-11-104: (Pwn2Own) Webkit CSS Text Element Count Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/517513/100/0/threaded http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401 http://www.zerodayinitiative.com/advisories/ZDI-11-104 http://osvdb.org/71182 http://www.securitytracker.com/id?1025212 http://secunia.com/advisories/43735 http://secunia.com/advisories/43748 http://secunia.com/advisories/44151 http://secunia.com/advisories/44154 http://www.vupen.com/english/advisories/2011/0645 http://www.vupen.com/english/advisories/2011/0654 http://www.vupen.com/english/advisories/2011/0984 XForce ISS Database: google-webkit-style-code-execution(66052) https://exchange.xforce.ibmcloud.com/vulnerabilities/66052
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.