Test ID:	1.3.6.1.4.1.25623.1.0.804163
Category:	General
Title:	Google Chrome Multiple Vulnerabilities-01 (Dec 2013) - Mac OS X
Summary:	Google Chrome is prone to multiple vulnerabilities.
Description:	Summary: Google Chrome is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Use-after-free vulnerability in the editing implementation in Blink. - An error in 'OneClickSigninHelper::ShowInfoBarIfPossible' function when handling the 302 HTTP status in sync. - An out-of-bounds read error in 'DehoistArrayIndex' function in 'hydrogen-dehoist.cc' in V8. - An error in 'FrameLoader::notifyIfInitialDocumentAccessed' function in 'core/loader/FrameLoader.cpp' in Blink. - An out-of-bounds write error in 'DehoistArrayIndex' function in 'hydrogen-dehoist.cc' in V8. - An unspecified error in runtime.cc in V8. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct denial of service, spoofing, session fixation attacks, compromise a user's system and other attacks may also be possible. Affected Software/OS: Google Chrome version prior to 31.0.1650.63 on Mac OS X. Solution: Upgrade to version 31.0.1650.63 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6635 Debian Security Information: DSA-2811 (Google Search) http://www.debian.org/security/2013/dsa-2811 http://www.securitytracker.com/id/1029442 http://secunia.com/advisories/56217 SuSE Security Announcement: openSUSE-SU-2013:1927 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html SuSE Security Announcement: openSUSE-SU-2013:1933 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html SuSE Security Announcement: openSUSE-SU-2014:0065 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6634 Common Vulnerability Exposure (CVE) ID: CVE-2013-6640 http://secunia.com/advisories/56216 SuSE Security Announcement: openSUSE-SU-2013:1960 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00122.html SuSE Security Announcement: openSUSE-SU-2013:1962 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00124.html SuSE Security Announcement: openSUSE-SU-2014:0092 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00063.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6636 Common Vulnerability Exposure (CVE) ID: CVE-2013-6639 Common Vulnerability Exposure (CVE) ID: CVE-2013-6638 http://www.mail-archive.com/v8-dev@googlegroups.com/msg79646.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6637
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.