The remote host is affected by the vulnerability described in GLSA-201506-04 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker can cause arbitrary remote code execution, Denial of       Service or bypass of security mechanisms.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote Windows host is prior to 4.3.61.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_05_stable-channel-update_19 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1265)

  - Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC     implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or     possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a     getUserMedia request. (CVE-2015-1260)

  - common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps,     which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-     of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the     PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions. (CVE-2015-1252)

  - core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome     before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code     that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
    (CVE-2015-1253)

  - core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of     the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the     availability of editing. (CVE-2015-1254)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2610-1 advisory.

    Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin     Policy restrictions. (CVE-2015-1253, CVE-2015-1254)

    A use-after-free was discovered in the WebAudio implementation in Chromium. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-1255)

    A use-after-free was discovered in the SVG implementation in Blink. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to cause a denial of service via     renderer crash, or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-1256)

    A security issue was discovered in the SVG implementation in Blink. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to cause a denial of service via     renderer crash. (CVE-2015-1257)

    An issue was discovered with the build of libvpx. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or     execute arbitrary code with the privileges of the sandboxed render process. (CVE-2015-1258)

    Multiple use-after-free issues were discovered in the WebRTC implementation in Chromium. If a user were     tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a     denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed     render process. (CVE-2015-1260)

    An uninitialized value bug was discovered in the font shaping code in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via renderer crash. (CVE-2015-1262)

    Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial     of service via application crash or execute arbitrary code with the privileges of the user invoking the     program. (CVE-2015-1265)

    Multiple security issues were discovered in V8. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of     service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-3910)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-     limit value, which allows remote attackers to trigger a negative value for a size field, and consequently     cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video     data. (CVE-2015-1258)

Note that Nessus relies on the presence of the package as reported by the vendor.

Google Chrome Releases reports :

37 security fixes in this release, including :

- [474029] High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous.

- [464552] High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous.

- [444927] High CVE-2015-1254: Cross-origin bypass in Editing. Credit to armin@rawsec.net.

- [473253] High CVE-2015-1255: Use-after-free in WebAudio. Credit to Khalil Zhani.

- [478549] High CVE-2015-1256: Use-after-free in SVG. Credit to Atte Kettunen of OUSPG.

- [481015] High CVE-2015-1251: Use-after-free in Speech. Credit to SkyLined working with HP's Zero Day Initiative.

- [468519] Medium CVE-2015-1257: Container-overflow in SVG. Credit to miaubiz.

- [450939] Medium CVE-2015-1258: Negative-size parameter in libvpx.
Credit to cloudfuzzer

- [468167] Medium CVE-2015-1259: Uninitialized value in PDFium. Credit to Atte Kettunen of OUSPG

- [474370] Medium CVE-2015-1260: Use-after-free in WebRTC. Credit to Khalil Zhani.

- [466351] Medium CVE-2015-1261: URL bar spoofing. Credit to Juho Nurminen.

- [476647] Medium CVE-2015-1262: Uninitialized value in Blink. Credit to miaubiz.

- [479162] Low CVE-2015-1263: Insecure download of spellcheck dictionary. Credit to Mike Ruddy.

- [481015] Low CVE-2015-1264: Cross-site scripting in bookmarks.
Credit to K0r3Ph1L.

- [489518] CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives.

- Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21).

The version of Google Chrome installed on the remote macOS host is prior to 43.0.2357.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_05_stable-channel-update_19 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1265)

  - Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC     implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or     possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a     getUserMedia request. (CVE-2015-1260)

  - common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps,     which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-     of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the     PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions. (CVE-2015-1252)

  - core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome     before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code     that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.
    (CVE-2015-1253)

  - core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of     the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the     availability of editing. (CVE-2015-1254)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
84332	GLSA-201506-04 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2015/6/23	2021/1/11	high
276611	Google Chrome < 4.3.61.21 Multiple Vulnerabilities	Nessus	Windows	2025/11/24	2025/11/24	critical
83778	Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2610-1)	Nessus	Ubuntu Local Security Checks	2015/5/22	2024/8/27	high
218633	Linux Distros Unpatched Vulnerability : CVE-2015-1258	Nessus	Misc.	2025/3/4	2025/8/18	high
83556	FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	2015/5/20	2021/1/6	high
83746	Google Chrome < 43.0.2357.65 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2015/5/21	2025/11/24	critical

检测

插件搜索

high

critical

high

high

high

critical