Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.812236
Category:General
Title:Google Chrome Security Updates (stable-channel-update-for-desktop-2017-12) - Linux
Summary:Google Chrome is prone to multiple vulnerabilities.
Description:Summary:
Google Chrome is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- An out of bounds write error in QUIC.

- A heap buffer overflow error in PDFium.

- An out of bounds write error in Skia.

- An use after free error in PDFium.

- An use after free error in libXML.

- A type confusion error in WebAssembly.

- Pointer information disclosure error in IPC call.

- An out of bounds read error in Blink.

- Cross origin information disclosure in Skia.

- Use of uninitialized value in Skia.

- Cross origin leak of redirect URL in Blink.

- Multiple URL spoofing errors in Omnibox.

- An integer overflow error in ICU.

- An issue with SPAKE implementation in BoringSSL.

- An insufficient blocking of JavaScript in Omnibox.

- An unsafe navigation in Chromecast Plugin.

Vulnerability Impact:
Successful exploitation of these
vulnerabilities will allow remote attackers to execute arbitrary script,
conduct spoofing attacks, data corruption or denial of service and
information leak.

Affected Software/OS:
Google Chrome version prior to 63.0.3239.84 on Linux

Solution:
Upgrade to Google Chrome version
63.0.3239.84 or later. Please see the references for more information.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-15407
Debian Security Information: DSA-4064 (Google Search)
https://www.debian.org/security/2017/dsa-4064
https://security.gentoo.org/glsa/201801-03
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
https://crbug.com/778505
RedHat Security Advisories: RHSA-2017:3401
https://access.redhat.com/errata/RHSA-2017:3401
Common Vulnerability Exposure (CVE) ID: CVE-2017-15408
https://crbug.com/762374
Common Vulnerability Exposure (CVE) ID: CVE-2017-15409
https://crbug.com/763972
Common Vulnerability Exposure (CVE) ID: CVE-2017-15410
https://crbug.com/765921
Common Vulnerability Exposure (CVE) ID: CVE-2017-15411
https://crbug.com/770148
Common Vulnerability Exposure (CVE) ID: CVE-2017-15412
Debian Security Information: DSA-4086 (Google Search)
https://www.debian.org/security/2018/dsa-4086
https://bugzilla.gnome.org/show_bug.cgi?id=783160
https://crbug.com/727039
https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html
RedHat Security Advisories: RHSA-2018:0287
https://access.redhat.com/errata/RHSA-2018:0287
http://www.securitytracker.com/id/1040348
Common Vulnerability Exposure (CVE) ID: CVE-2017-15413
https://crbug.com/766666
Common Vulnerability Exposure (CVE) ID: CVE-2017-15415
https://crbug.com/765512
Common Vulnerability Exposure (CVE) ID: CVE-2017-15416
https://crbug.com/779314
Common Vulnerability Exposure (CVE) ID: CVE-2017-15417
https://crbug.com/699028
Common Vulnerability Exposure (CVE) ID: CVE-2017-15418
https://crbug.com/765858
Common Vulnerability Exposure (CVE) ID: CVE-2017-15419
https://crbug.com/780312
Common Vulnerability Exposure (CVE) ID: CVE-2017-15420
Debian Security Information: DSA-4103 (Google Search)
https://www.debian.org/security/2018/dsa-4103
https://crbug.com/777419
http://www.securitytracker.com/id/1040282
Common Vulnerability Exposure (CVE) ID: CVE-2017-15422
Debian Security Information: DSA-4150 (Google Search)
https://www.debian.org/security/2018/dsa-4150
https://crbug.com/774382
https://usn.ubuntu.com/3610-1/
Common Vulnerability Exposure (CVE) ID: CVE-2017-15423
https://crbug.com/778101
Common Vulnerability Exposure (CVE) ID: CVE-2017-15424
https://crbug.com/756226
Common Vulnerability Exposure (CVE) ID: CVE-2017-15425
https://crbug.com/756456
Common Vulnerability Exposure (CVE) ID: CVE-2017-15426
https://crbug.com/756735
Common Vulnerability Exposure (CVE) ID: CVE-2017-15427
https://crbug.com/768910
Common Vulnerability Exposure (CVE) ID: CVE-2017-15430
https://crbug.com/780484
CopyrightCopyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.