Test ID:	1.3.6.1.4.1.25623.1.0.900419
Category:	General
Title:	Google Chrome Argument Injection Vulnerability
Summary:	This host has installed Google Chrome and is prone to argument; injection vulnerability.
Description:	Summary: This host has installed Google Chrome and is prone to argument injection vulnerability. Vulnerability Insight: The flaw is due to lack of sanitization check of user supplied input via - -renderer-path option in a chromehtml: URI. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code in the context of the web browser and can compromise the remote system by executing mailcious commands. Affected Software/OS: Google Chrome version 1.0.154.36 and prior on Windows Solution: Upgrade to Google Chrome version 4.1.249.1064 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5749 BugTraq ID: 32997 http://www.securityfocus.com/bid/32997 Bugtraq: 20081223 Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Google Search) http://www.securityfocus.com/archive/1/499570/100/0/threaded Bugtraq: 20081225 Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Google Search) http://www.securityfocus.com/archive/1/499581/100/0/threaded Bugtraq: 20081226 Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Google Search) http://www.securityfocus.com/archive/1/499616/100/0/threaded https://www.exploit-db.com/exploits/7566 http://retrogod.altervista.org/9sg_chrome.html http://securityreason.com/securityalert/4821
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.