The version of Google Chrome installed on the remote Windows host is prior to 43.0.2357.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_05_stable-channel-update_19 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1265)

  - Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC     implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or     possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a     getUserMedia request. (CVE-2015-1260)

  - common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps,     which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-     of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the     PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions. (CVE-2015-1252)

  - core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome     before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code     that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
    (CVE-2015-1253)

  - core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of     the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the     availability of editing. (CVE-2015-1254)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1023 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause Chromium to crash or,     potentially, execute arbitrary code with the privileges of the user running     Chromium. (CVE-2015-1251, CVE-2015-1252, CVE-2015-1253, CVE-2015-1254,     CVE-2015-1255, CVE-2015-1256, CVE-2015-1257, CVE-2015-1258, CVE-2015-1259,     CVE-2015-1260, CVE-2015-1261, CVE-2015-1262, CVE-2015-1263, CVE-2015-1264,     CVE-2015-1265)

    All Chromium users should upgrade to these updated packages, which contain     Chromium version 43.0.2357.65, which corrects these issues. After     installing the update, Chromium must be restarted for the changes to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2610-1 advisory.

    Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin     Policy restrictions. (CVE-2015-1253, CVE-2015-1254)

    A use-after-free was discovered in the WebAudio implementation in Chromium. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-1255)

    A use-after-free was discovered in the SVG implementation in Blink. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to cause a denial of service via     renderer crash, or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-1256)

    A security issue was discovered in the SVG implementation in Blink. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to cause a denial of service via     renderer crash. (CVE-2015-1257)

    An issue was discovered with the build of libvpx. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or     execute arbitrary code with the privileges of the sandboxed render process. (CVE-2015-1258)

    Multiple use-after-free issues were discovered in the WebRTC implementation in Chromium. If a user were     tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a     denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed     render process. (CVE-2015-1260)

    An uninitialized value bug was discovered in the font shaping code in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via renderer crash. (CVE-2015-1262)

    Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial     of service via application crash or execute arbitrary code with the privileges of the user invoking the     program. (CVE-2015-1265)

    Multiple security issues were discovered in V8. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of     service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-3910)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-     limit value, which allows remote attackers to trigger a negative value for a size field, and consequently     cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video     data. (CVE-2015-1258)

Note that Nessus relies on the presence of the package as reported by the vendor.

Google Chrome Releases reports :

37 security fixes in this release, including :

- [474029] High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous.

- [464552] High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous.

- [444927] High CVE-2015-1254: Cross-origin bypass in Editing. Credit to armin@rawsec.net.

- [473253] High CVE-2015-1255: Use-after-free in WebAudio. Credit to Khalil Zhani.

- [478549] High CVE-2015-1256: Use-after-free in SVG. Credit to Atte Kettunen of OUSPG.

- [481015] High CVE-2015-1251: Use-after-free in Speech. Credit to SkyLined working with HP's Zero Day Initiative.

- [468519] Medium CVE-2015-1257: Container-overflow in SVG. Credit to miaubiz.

- [450939] Medium CVE-2015-1258: Negative-size parameter in libvpx.
Credit to cloudfuzzer

- [468167] Medium CVE-2015-1259: Uninitialized value in PDFium. Credit to Atte Kettunen of OUSPG

- [474370] Medium CVE-2015-1260: Use-after-free in WebRTC. Credit to Khalil Zhani.

- [466351] Medium CVE-2015-1261: URL bar spoofing. Credit to Juho Nurminen.

- [476647] Medium CVE-2015-1262: Uninitialized value in Blink. Credit to miaubiz.

- [479162] Low CVE-2015-1263: Insecure download of spellcheck dictionary. Credit to Mike Ruddy.

- [481015] Low CVE-2015-1264: Cross-site scripting in bookmarks.
Credit to K0r3Ph1L.

- [489518] CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives.

- Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21).

The version of Google Chrome installed on the remote macOS host is prior to 43.0.2357.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_05_stable-channel-update_19 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1265)

  - Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC     implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or     possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a     getUserMedia request. (CVE-2015-1260)

  - common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps,     which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-     of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the     PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions. (CVE-2015-1252)

  - core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome     before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code     that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
    (CVE-2015-1253)

  - core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of     the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the     availability of editing. (CVE-2015-1254)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83745	Google Chrome < 43.0.2357.65 Multiple Vulnerabilities	Nessus	Windows	2015/5/21	2025/11/24	critical
83808	RHEL 6 : chromium-browser (RHSA-2015:1023)	Nessus	Red Hat Local Security Checks	2015/5/26	2024/11/4	medium
83778	Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2610-1)	Nessus	Ubuntu Local Security Checks	2015/5/22	2024/8/27	high
218633	Linux Distros Unpatched Vulnerability : CVE-2015-1258	Nessus	Misc.	2025/3/4	2025/8/18	high
83556	FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	2015/5/20	2021/1/6	high
83746	Google Chrome < 43.0.2357.65 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2015/5/21	2025/11/24	critical

检测

插件搜索

critical

medium

high

high

high

critical