Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2013-6634     Andrey Labunets discovered that the wrong URL was used     during validation in the one-click sign on helper.

  - CVE-2013-6635     cloudfuzzer discovered use-after-free issues in the     InsertHTML and Indent DOM editing commands.

  - CVE-2013-6636     Bas Venis discovered an address bar spoofing issue.

  - CVE-2013-6637     The chrome 31 development team discovered and fixed     multiple issues with potential security impact.

  - CVE-2013-6638     Jakob Kummerow of the Chromium project discovered a     buffer overflow in the v8 JavaScript library.

  - CVE-2013-6639     Jakob Kummerow of the Chromium project discovered an     out-of-bounds write in the v8 JavaScript library.

  - CVE-2013-6640     Jakob Kummerow of the Chromium project discovered an     out-of-bounds read in the v8 JavaScript library.

The remote host is affected by the vulnerability described in GLSA-201403-01 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition. Furthermore, a remote attacker       may be able to bypass security restrictions or have other unspecified       impact.
  Workaround :

    There is no known workaround at this time.

The version of Apple iTunes installed on the remote Windows host is prior to 12.0.1. It is, therefore, affected by multiple vulnerabilities due to the included version of WebKit. The errors could lead to application crashes or arbitrary code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 31.0.1650.63.  It is, therefore, affected by the following vulnerabilities :

  - An error exists related to session fixation, the sync     process and HTTP 302 redirects. (CVE-2013-6634)

  - A use-after-free error exists related to the editing     process. (CVE-2013-6635)

  - An error exists related to modal dialogs that could     allow address spoofing. (CVE-2013-6636)

  - Various unspecified errors exist having unspecified     impacts. (CVE-2013-6637)

  - An out-of-bounds read error, an out-of-bounds write     error and a buffer overflow error exist in the v8     JavaScript engine. (CVE-2013-6638, CVE-2013-6639,     CVE-2013-6640)

- Update to Chromium 31.0.1650.63 Stable channel update :

  - Security fixes :

  - CVE-2013-6634: Session fixation in sync related to 302     redirects

  - CVE-2013-6635: Use-after-free in editing

  - CVE-2013-6636: Address bar spoofing related to modal     dialogs

  - CVE-2013-6637: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2013-6638: Buffer overflow in v8

  - CVE-2013-6639: Out of bounds write in v8.

  - CVE-2013-6640: Out of bounds read in v8

  - and 12 other security fixes.

  - Remove the build flags to build according to the Chrome     ffmpeg branding and the proprietary codecs. (bnc#847971)

The mobile device is running a version of iOS that is prior to version 7.1. It is, therefore, affected by vulnerabilities in the following components :

  - Backup
  - Certificate Trust Policy
  - Configuration Profiles
  - CoreCapture
  - Crash Reporting
  - dyld
  - FaceTime
  - ImageIO
  - IOKit HID Event
  - iTunes Store
  - Kernel
  - Office Viewer
  - Photos Backend
  - Profiles
  - Safari
  - Settings - Accounts
  - Springboard
  - SpringBoard Lock Screen
  - TelephonyUI Framework
  - USB Host
  - Video Driver
  - WebKit

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
71254	Debian DSA-2811-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	2013/12/9	2021/1/11	high
72851	GLSA-201403-01 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/3/6	2021/1/6	critical
78597	Apple iTunes < 12.0.1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	2014/10/21	2018/11/15	critical
71228	Google Chrome < 31.0.1650.63 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2013/12/5	2019/11/27	high
74860	openSUSE Security Update : chromium (openSUSE-SU-2013:1927-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
72907	Apple iOS < 7.1 Multiple Vulnerabilities	Nessus	Mobile Devices	2014/3/10	2026/3/23	high

检测

插件搜索

high

critical

critical

high

high

high