Description: | Summary: The host is running Google Chrome and is prone to multiple vulnerabilities.
Vulnerability Insight: - An unspecified error related to the URL bar can be exploited to conduct spoofing attacks.
- An unspecified error exists in the handling of JavaScript dialogs.
- An error when handling stylesheet nodes can lead to a stale pointer.
- An error when handling key frame rules can lead to a stale pointer.
- An unspecified error exists in the handling of form controls.
- An unspecified error exists while rendering SVG content.
- An unspecified error in table handling can lead to a stale node.
- An unspecified error in table rendering can lead to a stale pointer.
- An unspecified error in SVG animations can lead to a stale pointer.
- An unspecified error when handling XHTML can lead to a stale node.
- An unspecified error exists in the textarea handling.
- An unspecified error when handling device orientation can lead to a stale pointer.
- An unspecified error in WebGL can be exploited to cause out-of-bounds reads.
- An integer overflow exists in the textarea handling.
- An unspecified error in WebGL can be exploited to cause out-of-bounds reads.
- An unspecified error can lead to exposure of internal extension functions.
- A use-after-free error exists within the handling of blocked plug-ins.
- An unspecified error when handling layouts can lead to a stale pointer.
Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of the browser, perform spoofing attacks, or cause denial of service condition.
Affected Software/OS: Google Chrome version prior to 9.0.597.107 on Linux
Solution: Upgrade to the Google Chrome 9.0.597.107 or later.
CVSS Score: 7.5
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
|