Test ID:	1.3.6.1.4.1.25623.1.0.903514
Category:	General
Title:	Google Chrome Multiple Vulnerabilities-02 (Feb 2014) - Windows
Summary:	Google Chrome is prone to multiple vulnerabilities.
Description:	Summary: Google Chrome is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An unspecified error in 'sandbox/win/src/named_pipe_dispatcher.cc' related to relative paths in Windows sandbox named pipe policy. - A use-after-free error related to web contents can be exploited to cause memory corruption. - An unspecified error exists in 'SVGAnimateElement::calculateAnimatedValue' function related to type casting in SVG. - A use-after-free error related to layout can be exploited to cause memory corruption. - An error in XSS auditor 'XSSAuditor::init' function can be exploited to disclose certain information. - Another error in XSS auditor can be exploited to disclose certain information. - Another use-after-free error related to layout can be exploited to cause memory corruption - An unspecified error exists in 'SSLClientSocketNSS::Core::OwnAuthCertHandler' function related to certificates validation in TLS handshake. - An error in drag and drop can be exploited to disclose unspecified information. - Some unspecified errors exist. No further information is currently available. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct denial of service, execution of arbitrary code and unspecified other impacts. Affected Software/OS: Google Chrome version prior to 33.0.1750.117 on Windows Solution: Upgrade to version 33.0.1750.117 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6652 Common Vulnerability Exposure (CVE) ID: CVE-2013-6653 Debian Security Information: DSA-2883 (Google Search) http://www.debian.org/security/2014/dsa-2883 SuSE Security Announcement: openSUSE-SU-2014:0327 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6654 Common Vulnerability Exposure (CVE) ID: CVE-2013-6655 Common Vulnerability Exposure (CVE) ID: CVE-2013-6656 Common Vulnerability Exposure (CVE) ID: CVE-2013-6657 Common Vulnerability Exposure (CVE) ID: CVE-2013-6658 Common Vulnerability Exposure (CVE) ID: CVE-2013-6659 Common Vulnerability Exposure (CVE) ID: CVE-2013-6660 Common Vulnerability Exposure (CVE) ID: CVE-2013-6661
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.